m17hr1l 4f12e344a8 xss fixes from audit: ...

- F1 case_detail.html: scheme-check source_ref href (block javascript: URLs)
- F2 admin.html / F3 admin_federation.html: replace inline onsubmit confirm()
  with data-attr + global handler in base.html (no more label/domain
  interpolation into onsubmit attribute string)
- federation.register_peer: validate hostname + fingerprint regex at ingest
- federation_explore.html: window.PSYC_EXPLORE via | tojson
- federation_network.js: DOMAIN_RE guard on peer-supplied domain before
  building cross-origin fetch URL (also closes open-redirect via 'open
  their explorer' button)
- app.py: nosniff + Referrer-Policy: no-referrer + X-Frame-Options: DENY
- sw.js: psyc-v11 cache bump

CSP deferred — needs inline scripts moved to external files first.
Tests: +2 cases, 245/245 green.

2026-06-07 14:23:55 +02:00

..

conftest.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_adminauth.py

stage-27: per-member TOTP enrollment + individual revocation

2026-05-23 00:46:45 +02:00

test_classify.py

stage-19: ThreatFox + MalwareBazaar + OTX Scoutline sources

2026-05-20 22:14:18 +02:00

test_courier.py

stage-18: approval queue — human gate before evidence leaves

2026-05-20 21:42:08 +02:00

test_defang.py

stage-20: defanging pipeline for IOC-extraction augmentation

2026-05-20 22:33:52 +02:00

test_discovery.py

stage-disc-e discovery: tests

2026-06-06 21:08:15 +02:00

test_docker_view.py

stage-26b: Docker topology in /admin — read-only socket-proxy + graph

2026-05-23 03:08:39 +02:00

test_explore_view.py

stage-exp-f explore: tests

2026-06-07 01:17:11 +02:00

test_federation.py

xss fixes from audit:

2026-06-07 14:23:55 +02:00

test_inference.py

inference: openai-compatible mode + bearer auth (for api.neuronetz.ai etc.)

2026-06-07 01:09:19 +02:00

test_lookup.py

stage-23: IOC index + lookup — the actionable keystone

2026-05-22 23:39:05 +02:00

test_map.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_network_view.py

stage-exp-a explore: public payload builder + tests

2026-06-07 01:11:17 +02:00

test_news.py

stage-31: Newsline polish — featured case, time buckets, severity accents, generated visuals

2026-05-25 19:02:22 +02:00

test_proof.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_pulse_respond.py

stage-auto-e pulse: tests for auto-response gating

2026-06-06 21:12:02 +02:00

test_pulse.py

stage-33e pulse: tests

2026-06-06 16:06:54 +02:00

test_respond.py

stage-25: response actions — human-gated enforcement + the disco

2026-05-23 00:24:31 +02:00

test_route.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_scout.py

stage-19-fix: ThreatFox + MalwareBazaar — real API shape

2026-05-20 22:25:56 +02:00

test_seal.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_topology_export.py

stage-topo-b topology-export: /federation/topology endpoint + CORS cache

2026-06-07 01:56:09 +02:00

test_train.py

stage-14: pytest test suite over the worker lines

2026-05-18 23:36:41 +02:00

test_translog.py

stage-trans-a translog: append-only signed merkle chain + tests

2026-06-06 21:09:32 +02:00

test_vouching.py

stage-vouch-e federation: tests for vouching + quorum gate

2026-06-06 21:11:18 +02:00