Marc-André Bombeck 14de24c15d fix(api-response): strict IP validation via node:net.isIP ...

The looksLikeIp helper matched any input the hex/dot character class
accepted — `:::`, `1.2`, `gg:hh::1` all passed. The cf-connecting-ip
flow trusts the header under the env flag and the trusted-proxy XFF
chain forwards the rightmost entry straight to the rate-limiter +
audit log, so a malformed value landed downstream unchanged. Defer to
Node's built-in `isIP` which returns 4 / 6 for valid v4 / v6 and 0
for anything else. Add tests covering the structurally invalid v4 /
v6 / hex shapes plus a positive case for well-formed IPv6.

2026-05-17 17:23:02 +02:00

..

achievements-no-insults.test.ts

i18n(achievements): replace insulting badge titles

2026-05-10 13:32:19 +02:00

api-handler-safe-request-prop.test.ts

fix(api-handler): widen safeRequestProp narrow-catch to tolerate undefined requests

2026-05-14 21:50:29 +02:00

crypto.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

dashboard-layout.test.ts

feat(dashboard): recent workouts tile

2026-05-16 15:47:44 +02:00

db-to-json.test.ts

code-quality: drop dead SESSION_SECRET, add toJson helper, document db-compat, type passkey responses, lock zero-TODO

2026-05-17 00:34:21 +02:00

doctor-report-data.test.ts

feat(doctor-report): practice name on cover page (persisted as user preference)

2026-05-09 21:36:47 +02:00

doctor-report-pdf-core.test.ts

feat(doctor-report): practice name on cover page (persisted as user preference)

2026-05-09 21:36:47 +02:00

export.test.ts

style: prettier on v1.4.25 W7 timezone files

2026-05-14 12:12:59 +02:00

format-locale.test.ts

feat(i18n): MaintainershipBanner notice + foundation for 4 new locales

2026-05-14 15:40:34 +02:00

geo-asn.test.ts

feat(geo): bundle GeoLite2-City and add an offline-first lookup path

2026-05-15 16:36:55 +02:00

geo-offline-detection.test.ts

feat(geo): send a one-shot admin notification when the offline databases are missing

2026-05-15 22:15:48 +02:00

geo.test.ts

chore: voice + filename hygiene + wave-4 state wrap

2026-05-10 21:46:32 +02:00

get-client-ip.test.ts

fix(api-response): strict IP validation via node:net.isIP

2026-05-17 17:23:02 +02:00

glucose.test.ts

release(v1.2): i18n, thresholds, glucose, dashboard customization, feedback, multi-provider AI (#77)

2026-04-18 22:20:12 +02:00

i18n-locale-integrity.test.ts

chore(i18n): drop 380 dead translation keys flagged in W10 runtime probe

2026-05-14 21:40:13 +02:00

idempotency.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

measurement-type-enum-coverage.test.ts

feat(measurements): wire walking-steadiness + audio-exposure-event through every registry

2026-05-16 12:23:30 +02:00

medical-citations.test.ts

v1.4 medical-safety: protect against silent DBP hypotension, align BP & step citations, ACE body-fat consolidation (#123)

2026-05-08 12:07:46 +02:00

medication-schedule.test.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

moodlog-secret.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

passkey-errors.test.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

process-type.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.test.ts

fix(notifications): disambiguate inbox vs channel-config naming

2026-05-16 17:49:31 +02:00

require-auth-bearer.test.ts

fix(auth): allow narrow-scope tokens on unscoped routes — unblocks v1.5 iOS endpoints

2026-05-14 16:46:35 +02:00

server-translator.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

time-window-format.test.ts

style: prettier on touched test + e2e files

2026-05-10 13:58:30 +02:00