Andras Bacsai 9a2c432c79 fix(api): expose sensitive fields for privileged tokens ... Privileged API tokens can read hidden resource fields in environment and resource responses, including instance-admin team tokens with team_id 0. Configuration hashes now include hidden environment variable values so secret edits trigger restart detection.		2026-07-07 12:53:34 +02:00
..
ApiSensitiveFieldsTest.php	fix(api): expose sensitive fields for privileged tokens	2026-07-07 12:53:34 +02:00
ApiTokenCreationSecurityTest.php	fix(security): prevent snapshot replay in API token permission checks	2026-02-27 22:58:44 +01:00
AuditLogTest.php	fix(security): enforce team access on mutable actions	2026-06-04 11:03:06 +02:00
CaCertificateCommandInjectionTest.php	chore(tests): reorganize feature suites and expand team auth coverage	2026-02-26 07:13:19 +01:00
CmdHealthCheckValidationTest.php	chore(tests): reorganize feature suites and expand team auth coverage	2026-02-26 07:13:19 +01:00
CommandInjectionSecurityTest.php	Merge remote-tracking branch 'origin/next' into audit-policies	2026-06-04 10:18:54 +02:00
GithubAppSetupCallbackTest.php	Improve GitHub App setup flow	2026-06-03 09:33:46 +02:00
IpAllowlistTest.php	Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber	2026-06-15 13:29:25 +02:00
TrustHostsMiddlewareTest.php	Merge remote-tracking branch 'origin/next' into api-sensitive-data-scrubber	2026-06-15 13:29:25 +02:00