Marc-André Bombeck 03bde8d40c Harden invite token-in-path against cache and index leaks ...

Extend the /c/ edge defence (no-store, noindex, no-referrer) to the
/invite/<hlv_token> surface — the invite secret rides in the path, so no
CDN may cache it and no crawler may index the URL.

2026-06-14 19:34:14 +02:00

..

api

feat(ux,settings): undo where it was missing and settings that behave one way

2026-06-11 02:19:28 +02:00

i18n-call-site-coverage.test.ts

feat(ux,settings): undo where it was missing and settings that behave one way

2026-06-11 02:19:28 +02:00

i18n-drift-guard.test.ts

chore(release): v1.4.28

2026-05-16 03:17:00 +02:00

inventory-write-isolation.test.ts

fix(medications): every taken dose moves the stock, in units that match the product

2026-06-12 17:42:31 +02:00

proxy-csp-hsts-hardening.test.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

proxy-demo-mode-allowlist.test.ts

feat(demo): allow chart display-pref toggles under demo mode

2026-06-07 23:33:19 +02:00

proxy-invite-public.test.ts

Harden invite token-in-path against cache and index leaks

2026-06-14 19:34:14 +02:00

proxy-onboarding-redirect.test.ts

chore(release): v1.4.24

2026-05-12 22:33:35 +02:00

proxy-privacy-public.test.ts

chore(release): v1.4.26 — privacy policy for App Store submission

2026-05-15 07:35:05 +02:00

proxy-well-known-public.test.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

service-worker.test.ts

fix(pwa): re-anchor the sw.js fallback version on every build

2026-06-14 10:47:50 +02:00

sw-security-hardening.test.ts

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00