Issues - Moon-Household-Budget - Gitea: Git with a cup of tea

bonna61/Moon-Household-Budget

Labels Milestones New Issue

Add Subresource Integrity (SRI) to CDN-loaded Chart.js

#10 opened 2026-06-06 19:58:11 +00:00 by tonym

Guard the /suggestions HTML page with the same auth as its API

#9 opened 2026-06-06 19:58:11 +00:00 by tonym

Cap pasted statement text size before regex parsing

severity:medium

#8 opened 2026-06-06 19:58:11 +00:00 by tonym

Make Werkzeug debug mode opt-in instead of debug=True

severity:medium

#7 opened 2026-06-06 19:58:11 +00:00 by tonym

Escape input in bold_md filter before wrapping in Markup (stored XSS)

#6 opened 2026-06-06 19:58:10 +00:00 by tonym

Add authentication + CSRF protection to all mutating routes

#5 opened 2026-06-06 19:58:10 +00:00 by tonym

Add MAX_CONTENT_LENGTH + content-type check to the PDF/CSV import route

#4 opened 2026-06-06 19:58:10 +00:00 by tonym

Sanitize upload filename — path traversal in import route

severity:critical

#3 opened 2026-06-06 19:58:10 +00:00 by tonym

Remove hardcoded Flask secret_key fallback ("fullmoonbakehouse")

severity:critical

#1 opened 2026-06-06 19:58:09 +00:00 by tonym