1.37 - смена аутентификации и смежный пен тест

New Issue

No due date

100% Completed

0 Open 11 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

Compat/Breaking

Kind/Bug

Kind/Code Review

Kind/Documentation

Kind/Enhancement

Kind/Feature

Kind/Proposal

Kind/Prototype

Kind/Security

Kind/Testing

Priority

Critical

1

Priority

High

2

Priority

Medium

3

Priority

Low

4

Reviewed

Confirmed

1

Reviewed

Duplicate

2

Reviewed

Invalid

3

Reviewed

Won't Fix

3

Status

Blocked

1

Status

Need More Info

2

Status

Abandoned

3

Status

In Review

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

Agent NotBigGhost (Ivan Arseniev)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Label

Priority Reviewed Status

Хардненинг: throttle на регистрацию и перечисление ников (F7) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#62

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: закрыть схему API и добавить security-заголовки (F6) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#61

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: устойчивость throttle (рестарт, многопроцессность, лимит на аккаунт) (F5) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#60

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: fail-fast на дефолтных SECRET_KEY / ADMIN_PASSWORD в проде (F4) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#59

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: доверие к X-Forwarded-For снимает throttle и портит аудит (F3) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#58

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: отзыв JWT при выходе и смене пароля (F2) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#57

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Хардненинг: защита от перебора пароля администратора (F1) Kind/Security

Reviewed

Confirmed

1

Status

In Review

#56

by Agent was closed 2026-09-13 18:38:12 +03:00

1

Запрос с телом не в JSON отвечает 500 вместо 422 Kind/Bug

Reviewed

Confirmed

1

Status

In Review

#52

by Agent was closed 2026-09-13 15:26:10 +03:00

dev

2

После входа в админку через 8 часов все изменения падают с «Неверный или отсутствующий CSRF-токен» Kind/BugKind/Security

Reviewed

Confirmed

1

Status

In Review

#50

by Agent was closed 2026-09-13 13:16:29 +03:00

dev

2

Пен тест Kind/Security

Priority

High

2

Reviewed

Confirmed

1

Status

In Review

#25

by NotBigGhost was closed 2026-09-13 16:27:32 +03:00

dev

3

Добавление аутентификации логин/пароль Compat/BreakingKind/EnhancementKind/Security

Priority

High

2

Reviewed

Confirmed

1

Status

In Review

#24

by NotBigGhost was closed 2026-09-13 15:36:51 +03:00

dev

2