5 Commits

Include renames

Author	SHA1	Message	Date
asepharyana	05a3bc7471	fix: audit round 4 — XSS in HTML report export, SSRF webhook guard, body limit ... - ToHTML() now html.EscapeString on ticker, generated_at, section name/body, citations (stored/LLM content can't inject script into exported file) - Discord destination webhook_url restricted to discord.com/discordapp.com hosts (SSRF guard: server POSTs alert cards; no private IPs or arbitrary hosts) - Router middleware caps POST/PUT/PATCH bodies at 1 MiB (MaxBytesReader) - TestDestinations updated: non-discord host must 422, uses realistic discord.com webhook URL	2026-09-16 14:43:56 +07:00
asepharyana	07ece10474	fix: audit round 2 — session cookie Secure kondisional, logout clear cookie, IDOR report owner-scoping (migrasi 0008), health force login-gate, SSE stream login-gate, FE: Gate undefined-flicker, auth-expired global redirect, X-User-Key demo dihapus, error handling alerts/routines/watchlist, chart label, encodeURIComponent, Screener onMount	2026-09-15 23:19:56 +07:00
asepharyana	5c953289b1	fix: report 504 — cap triase LLM 5 artikel, narasi_awam persist ke payload; report FE bahasa awam	2026-09-15 21:15:49 +07:00
asepharyana	9fa47240dc	feat: auto-narasi LLM (OmniRoute sonnet-5) — hero briefing + narasi_awam report, migrasi 0006	2026-09-15 19:50:48 +07:00
asepharyana	8c184ccae1	feat: add Citations and WatchlistChat components, integrate with API ... - Implemented Citations component to display citation data. - Created WatchlistDrawer and ChatSidebar components for managing watchlists and AI chat functionality. - Integrated API calls for watchlist management and chat interactions. - Updated index.tsx to include new components in the main application layout. - Added API client in lib/api.ts for structured API interactions. - Developed Alerts, Dashboard, Portfolio, Routines, Screener, and Report pages with relevant data fetching and UI components. - Introduced styles in tokens.css for consistent theming across the application. - Configured TypeScript and Vite for project setup and development.	2026-09-15 12:36:48 +07:00