jonathan/Ten31-Portal

Files

T

History

Jonathan Kirkwood 3c7094241c 0.2.41: contain SPA static serving to the web root

Percent-encoded traversal (..%2f) survived routing and let an
unauthenticated request read files outside static/, including the
database and session secret on the data volume. Paths are now resolved
and contained to the frontend build directory; anything that escapes
falls back to index.html.

2026-08-10 15:38:21 -05:00

..

Release 0.2.22: capital chart, Investor View, GP stakes, doc folders

2026-07-01 14:25:50 -05:00

0.2.41: contain SPA static serving to the web root

2026-08-10 15:38:21 -05:00

.gitignore

CI: GitHub Actions build and release workflows

2026-06-07 22:09:05 +00:00

Dockerfile

0.2.26: security hardening from audit (P2/P3 fixes)

2026-07-01 19:09:27 -05:00

icon.png

Release 0.2.22: capital chart, Investor View, GP stakes, doc folders

2026-07-01 14:25:50 -05:00

instructions.md

Release 0.2.22: capital chart, Investor View, GP stakes, doc folders

2026-07-01 14:25:50 -05:00

LICENSE

Release 0.2.22: capital chart, Investor View, GP stakes, doc folders

2026-07-01 14:25:50 -05:00

Makefile

fix: add --no-assets to s9pk pack (no assets dir)

2026-06-07 22:11:24 +00:00

package-lock.json

Release 0.2.22: capital chart, Investor View, GP stakes, doc folders

2026-07-01 14:25:50 -05:00

package.json

0.2.40: bitcoin-denominated line on the LP capital chart

2026-07-14 09:10:14 +02:00

README.md

Issue 1: repo scaffold and project structure

2026-06-07 19:20:02 +00:00

s9pk.mk

CI: GitHub Actions build and release workflows

2026-06-07 22:09:05 +00:00

start.sh

0.2.26: security hardening from audit (P2/P3 fixes)

2026-07-01 19:09:27 -05:00

tsconfig.json

Issue 17: StartOS 0.4.0 packaging

2026-06-07 19:23:26 +00:00

README.md

StartOS packaging

StartOS 0.4.0 service packaging goes here (Issue 17).