Security fixes - #716

Merged

Romsik788 merged 9 commits into

mainfrom

Sep 9, 2026

Commits on Sep 8, 2026

fix: generate a random ADMINFORTH_SECRET in create-app and warn on short secrets
Romsik788
committed
5b78c56
fix: decide the create-app database path by inspection and always provide the adminuser SQL when Prisma is skipped
Romsik788
committed
dc440a9
test: cover get_filtered_ids raw-filter rejection and list permission in i18n and bulk-ai-flow
Romsik788
committed
cd52e37
test: cover record-level permissions and backendOnly projection in i18n and bulk-ai-flow endpoints
Romsik788
committed
b70e82d
fix: render an empty RelativeTime cell for empty or invalid dates
Romsik788
committed
596e941