3-tier architecture, security hardening, parser fixes, and upstream backports - #64

Closed

xMinhx wants to merge 41 commits into

xMinhx:pr/upstream-clean

Commits on Jun 27, 2026

Sponsored docker container for the frontend.

Schubert, Stefan
authored and
xMinhx
committed
6e81a1c
refactor: implement 3-tier architecture by separating frontend and backend assets

Schubert, Stefan
authored and
xMinhx
committed
a6e5dda
refactor: migrate to 3-tier architecture by removing legacy views and adding login page

Schubert, Stefan
authored and
xMinhx
committed
7845b4e
chore(frontend): remove deprecated frontend/src/api/apiClient.ts (migrated to queries/apiClient)

Schubert, Stefan
authored and
xMinhx
committed
6dfee48
Migrate API routes to explicit api/ prefix
xMinhx
committed
50557e3
Add Docker 3-tier deployment configuration

xMinhx
and
StefanSchubert
committed
08f4281
Add 3-tier Docker deployment and frontend infrastructure

xMinhx
and
StefanSchubert
committed
e856b85
chore: fix .gitignore conflict marker, restore render import, add .nvmrc and requirements.lock
xMinhx
committed
863cbf5
docs: align preview/prod runtime guidance
xMinhx
committed
345d932
fix(runtime): stabilize preview and align CI with prod
xMinhx
committed
5d73bd8
test: mock NVD API calls, add nvd_integration marker
xMinhx
committed
93b9b3d
fix: address PR review comments
xMinhx
committed
2be5532
test: add e2e marker to pytest config
xMinhx
committed
3b6ad24
test: add end-to-end report analysis tests
xMinhx
committed
a1fc6bc
ci: add e2e_test job to CI pipeline
xMinhx
committed
ea8944b
fix: add missing HtmlView/AppView import in urls.py
xMinhx
committed
dd0d45c
ci: fix requirements-dev.txt reference in e2e job
xMinhx
committed
587459e
security: fix timing attack on API key verification (C1)
xMinhx
committed
dd024cc
security: prevent LDAP injection via username escaping (C2)
xMinhx
committed
dc0ff4f
security: guard dev auth with IS_DEV check (C3)
xMinhx
committed
3ca8b07
security: add permission check to DeleteProjectAPI (H1)
xMinhx
committed
8f00cd3
security: validate CVE ID format and add request timeouts (H2)
xMinhx
committed
e4e92b3
security: whitelist templates in HtmlView (H5)
xMinhx
committed
2b41151
security: remove duplicate api_404_view function (M4)
xMinhx
committed
1898b53
security: improve Docker security configuration (L1/L2/L3)
xMinhx
committed
1509c5e
security: rate limiting, dev creds, CORS, HTTPS settings (H3/H4/M2/M3)
xMinhx
committed
ed6644a
fix(parser): handle dict input in cyclonedx parser
xMinhx
committed
e431e97
fix(parser): dedupe CVEs by (name, version) in trivy parser
xMinhx
committed
03b6fd6
test: add unit tests for trivy and cyclonedx parsers
xMinhx
committed
c8f1322
test(e2e): add e2e tests for trivy and cyclonedx report upload
xMinhx
committed
1859b1d
test: add trivy and cyclonedx test fixtures
xMinhx
committed
9212d25
docs: update outdated content to match 3-tier architecture and current parsers
xMinhx
committed
5fa7af4
26 extended length of fields project_name and project_id

Nils Kreiner
authored and
xMinhx
committed
6cd2f6e
fixed validation

Nils Kreiner
authored and
xMinhx
committed
025e9de
finished adding tooltips for the CVSS calculator metrics

Nils Kreiner
authored and
xMinhx
committed
2a4e1fb
Fix profile picture loading error in production

NikAcc
authored and
xMinhx
committed
91ff8bf
added cve description to the details page (upstream #10)

Nils Kreiner
authored and
xMinhx
committed
dd4e507
Replace remote DiceBear avatars with local client-side generation (upstream #22)

xMinhx
and
NikAcc
committed
3898c43
Remove unused @dicebear/adventurer-neutral dependency (upstream #22)

xMinhx
and
NikAcc
committed
c76e76f
Suppress onRowClick navigation when selecting text in report grid (upstream #38)

xMinhx
and
kreinern
committed
101cf5f
docs: rewrite QUICK_START and API_TEST_GUIDE in clean English
xMinhx
committed
f78e9dd