harden: remove hardcoded secret in index.js... - #355

Open

anupamme wants to merge 2017 commits into

mapcentia:developfrom

anupamme:fix-repo-vidi-express-session-hardcoded-secret

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 22, 2025

Update `grunt` dependency to v1.6.1 in `package.json` and `package-lock.json`
mapcentia
committed
ae112b4

Commits on Oct 28, 2025

Merge branch 'master' into connection
mapcentia
committed
fbce254

Commits on Oct 29, 2025

Enhance OpenID flow with database and superuser role selection UI. Include minimal JWT decoding and streamlined persistence handling. Update session backend to support superuser parameter.
mapcentia
committed
539fd0f
Clear tokens
mapcentia
committed
c7c8da5
Handle double quotes in relation names across utilities, widgets, and SQL queries. Introduce `quoteRelation` utility for safe formatting.
mapcentia
committed
eb887e0

Commits on Oct 31, 2025

Fix commented-out access token line in OpenID flow for consistency.
mapcentia
committed
4ed63a7
Update version to 2025.10.3 in HTML default template
mapcentia
committed
9e81fc9
Merge branch 'master' into connection
mapcentia
committed
6cf445b

Commits on Nov 4, 2025

Commits on Nov 5, 2025

Commits on Nov 7, 2025

Update version to 2025.11.0 in HTML template and add release notes to CHANGELOG
mapcentia
committed
f0e7066

Commits on Nov 11, 2025

Upgrade `react` and `react-dom` dependencies to version 18.3.1.
mapcentia
committed
8f44fad

Commits on Nov 12, 2025

Commits on Nov 21, 2025

Commits on Nov 23, 2025

Update changelog: fix printing and screenshotting issues with MapLibre GL base layers
mapcentia
committed
b5ae569

Commits on Nov 24, 2025

Commits on Nov 27, 2025

Increase `loadingTimeout` to 45000ms for improved layer loading reliability.
mapcentia
committed
fc24fff

Commits on Dec 8, 2025

Commits on Dec 9, 2025

Commits on Dec 10, 2025

Fix null-check for `fields[key]` to avoid potential runtime errors in editor browser logic.
mapcentia
committed
3058f89

Commits on Dec 11, 2025

Add `leaflet.nontiledlayer` dependency and refactor WMS base layer logic. Update changelog and replace deprecated script references with updated package paths.
mapcentia
committed
1709c27

Commits on Dec 12, 2025

Commits on Dec 18, 2025

Ensure proper handling of `msg.text()` in print logic: replace `.indexOf` with `.startsWith` for `Layers all loaded` check.
mapcentia
committed
a54aa38

Commits on Dec 19, 2025

Format `lastmodified` dates for layer descriptions and update tooltip title logic in MarkupGenerator.
mapcentia
committed
fce5a28

Commits on Jan 6, 2026

Commits on Jan 15, 2026

Commits on Jan 16, 2026

Commits on Jan 19, 2026

Commits on Jan 22, 2026

Commits on Jan 23, 2026

Fix typo in changelog entry for dynamically added layer filtering on print.
mapcentia
committed
3b7f989

Commits on Jan 27, 2026

Add support for deleting symbols and track deletions in state sync
mapcentia
committed
1ddcbf8

Commits on Jan 28, 2026

Bump version to 2026.1.4 and update changelog with symbols module support for deletion and state sync tracking.
mapcentia
committed
b816b60

Commits on Feb 2, 2026

Commits on Feb 9, 2026

Commits on Feb 23, 2026

Commits on Feb 24, 2026

Commits on Mar 10, 2026

Commits on Mar 12, 2026

Commits on Mar 17, 2026

Commits on Mar 18, 2026

Commits on Mar 19, 2026

Commits on Mar 20, 2026

Update changelog: clarify ESBuild integration details and fix minor formatting issues
mapcentia
committed
5dac301

Commits on Mar 24, 2026

Commits on Mar 26, 2026

Commits on Mar 27, 2026

Increase image upload dimensions: update MAX_WIDTH to 2400 and MAX_HEIGHT to 1800 in FileUploadWidget.
mapcentia
committed
2ebef40

Commits on Mar 30, 2026

Commits on Apr 15, 2026

Commits on Apr 16, 2026

Commits on Apr 17, 2026

Commits on Apr 20, 2026

Commits on Apr 23, 2026

Refactor Docker setup: consolidate Dockerfiles, streamline build process, update paths, and simplify `docker-compose.yml`.
mapcentia
committed
8407d97

Commits on Apr 28, 2026

Commits on May 4, 2026

Commits on May 5, 2026

Commits on May 8, 2026

Commits on May 13, 2026

Commits on May 15, 2026

Commits on May 20, 2026

Commits on May 21, 2026

feat(api-bridge): add QueueStorage module skeleton
mapcentia
committed
9d4d849
feat(api-bridge): add QueueStorage loadIndex/saveIndex

mapcentia
and
claude
committed
212a62a
feat(api-bridge): add QueueStorage loadItem/saveItem/deleteItem

mapcentia
and
claude
committed
8219fbf
feat(api-bridge): migrate legacy queue blob to per-item records

mapcentia
and
claude
committed
9a24680
refactor(Queue): add metadata projection helper and id generator
mapcentia
committed
9eb9ef2
refactor(Queue): replace _queue array with _metadataIndex + storage

mapcentia
and
claude
committed
93c844d
refactor(Queue): async push() with metadata index + per-item storage

mapcentia
and
claude
committed
e8d4491
refactor(Queue): async remove operations through storage

mapcentia
and
claude
committed
e1b4907
fix(Queue): removeByLayerId matches bare schema.table format (not v:prefix)

mapcentia
and
claude
committed
6509fc1
fix(Queue): restore forceLayerUpdate flag in removeByLayerId
mapcentia
committed
bae30e5
refactor(Queue): operate on metadata index, load full items on demand

mapcentia
and
claude
committed
66d95ae
refactor(apiBridge): async transformResponseHandler reading queue from storage

mapcentia
and
claude
committed
d5dd311
refactor(geocloud): await async transformResponse before processing

mapcentia
and
claude
committed
83be862
refactor(Queue): remove deprecated getItems() in favor of metadata + getFullItem

mapcentia
and
claude
committed
d241c58
refactor(Queue): stats use metadata index instead of in-memory queue

mapcentia
and
claude
committed
b9cdac4
docs: queue → IndexedDB memory verification procedure
mapcentia
committed
0e4b070
test: end-to-end queue push → process → cleanup

mapcentia
and
claude
committed
7e7a7cf
fix(api-bridge): use bare localforage identifier (works in browser, not just Node)
mapcentia
committed
68a6103
fix(layerTree): release vectorPopUp event handlers to prevent feature retention
mapcentia
committed
b6b677b
fix(layerTree): unbind arrive handler after first fire to release captured feature
mapcentia
committed
69d637a
fix(editor): unmount React root on stopEdit to fully release form state
mapcentia
committed
5682e58
fix(layerTree): dispose Bootstrap Collapse + strip listeners on popup remove
mapcentia
committed
efce59e
fix(geocloud): remove debug logs + call onLoad from async success (not jQuery complete)
mapcentia
committed
ff369a2
fix(editor): indirect onSubmit captures via module-level holder + flushSync unmount
mapcentia
committed
f3dca10
fix(editor): sentinel render(null) before unmount() to release alternate fiber
mapcentia
committed
f3a95f1
perf(editor): PureComponent FileUploadWidget + memo SelectWidget to skip needless re-renders
mapcentia
committed
3814d81
fix(editor): revert SelectWidget memo wrap (RJSF rejects memo'd widgets)
mapcentia
committed
a088b9d
perf(editor): FileUploadWidget shouldComponentUpdate ignores callback props
mapcentia
committed
3f5d1ab
perf(editor): Add form skipDefaults for empty fields (matches Edit form)
mapcentia
committed
b1299ba
feat(apiBridge): findPendingItemByPkey for editor queue-aware re-edit

mapcentia
and
claude
committed
038ff2b
feat(editor): use pending queue item when re-editing feature with uncommitted changes

mapcentia
and
claude
committed
16578c2

Commits on May 22, 2026

Commits on May 27, 2026

fix(apiBridge): break queueItem capture in ajax success/error closures

mapcentia
and
claude
committed
2ad1330

Commits on May 29, 2026

Commits on Jun 8, 2026

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 16, 2026

Commits on Jun 23, 2026

update(docker): bump vidi image to `node24-1` in docker-compose
mapcentia
committed
7882875

Commits on Jun 25, 2026

Commits on Jun 29, 2026

Commits on Aug 19, 2026

fix(meta): improve error handling with specific rejection message for missing meta data
mapcentia
committed
b13c426

Commits on Aug 20, 2026