flowsight

5 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	05a3bc7471	fix: audit round 4 — XSS in HTML report export, SSRF webhook guard, body limit CI / go test + web typecheck (push) Canceled after 0s Details CI / build + deploy (Nix) — flowsight (push) Canceled after 0s Details - ToHTML() now html.EscapeString on ticker, generated_at, section name/body, citations (stored/LLM content can't inject script into exported file) - Discord destination webhook_url restricted to discord.com/discordapp.com hosts (SSRF guard: server POSTs alert cards; no private IPs or arbitrary hosts) - Router middleware caps POST/PUT/PATCH bodies at 1 MiB (MaxBytesReader) - TestDestinations updated: non-discord host must 422, uses realistic discord.com webhook URL	2026-09-16 14:43:56 +07:00
asepharyana	07ece10474	fix: audit round 2 — session cookie Secure kondisional, logout clear cookie, IDOR report owner-scoping (migrasi 0008), health force login-gate, SSE stream login-gate, FE: Gate undefined-flicker, auth-expired global redirect, X-User-Key demo dihapus, error handling alerts/routines/watchlist, chart label, encodeURIComponent, Screener onMount CI / go test + web typecheck (push) Canceled after 0s Details CI / build + deploy (Nix) — flowsight (push) Canceled after 0s Details	2026-09-15 23:19:56 +07:00
asepharyana	79f42dfefa	feat: default watchlist semua, login-gate fitur, CI anti-stale via /api/version	2026-09-15 22:12:09 +07:00
asepharyana	1881e7c6b1	feat: Google OAuth login + server sessions (user_key u:<sub>)	2026-09-15 16:29:57 +07:00
asepharyana	8c184ccae1	feat: add Citations and WatchlistChat components, integrate with API - Implemented Citations component to display citation data. - Created WatchlistDrawer and ChatSidebar components for managing watchlists and AI chat functionality. - Integrated API calls for watchlist management and chat interactions. - Updated index.tsx to include new components in the main application layout. - Added API client in lib/api.ts for structured API interactions. - Developed Alerts, Dashboard, Portfolio, Routines, Screener, and Report pages with relevant data fetching and UI components. - Introduced styles in tokens.css for consistent theming across the application. - Configured TypeScript and Vite for project setup and development.	2026-09-15 12:36:48 +07:00