jekkos 00b97c3302 feat(security): add THROTTLE_KEY env-var fallback for throttle.key (#4707) ...

checkThrottleEncryption() now consults the THROTTLE_KEY environment
variable when throttle.key is empty, mirroring the ENCRYPTION_KEY
fallback in Config/Encryption. This lets Docker/Compose deployments
supply the throttle HMAC secret without writing a shared value into a
read-only .env. An explicit throttle.key always takes precedence.

Adds regression tests to the existing security_helperTest suite and
documents THROTTLE_KEY in .env.example.

2026-09-22 23:30:05 +02:00

..

Commands

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

Config

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

Controllers

Fix GHSA-frx7-c5vv-m3mr: recompute cashup total server-side and force owner identity (#4706)

2026-09-21 17:37:07 +02:00

Database

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

Events

fix(locale): validate language_code against known locales to block path traversal (#4704)

2026-09-21 17:36:50 +02:00

Filters

fix(sales): gate per-record endpoints behind reports_sales grant (#4627)

2026-08-23 17:40:06 +04:00

Helpers

feat(security): add THROTTLE_KEY env-var fallback for throttle.key (#4707)

2026-09-22 23:30:05 +02:00

Language

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

Libraries

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

Models

fix(tests): resolve all phpunit failures — clean-DB suite green (#4626) (#4691)

2026-09-08 21:49:28 +02:00

ThirdParty

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Views

fix(security): handle special characters in .env key values and improve insertion logic (#4656)

2026-09-21 17:35:45 +02:00

.htaccess

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Common.php

Upgrade CI to 4.4.3

2024-06-15 17:19:15 +02:00

index.html

Corrected link in README.md

2024-06-15 17:19:15 +02:00