fix: enforce settings authority boundaries (#618)

Close generic settings authorization bypasses and enforce per-setting authority, validation, redaction, transactional config import, and route-local write rate limiting.
2026-08-03 07:46:42 +02:00 · 2026-07-22 20:15:38 +08:00
parent 0467e87bfe
commit 44d8109486
63 changed files with 2287 additions and 731 deletions
@@ -467,7 +467,7 @@ const db: {
    ssoBreakGlassUsername: "",
    passwordMinLength: "8",
    passwordRequireUppercase: "true",
-    passwordRequireNumber: "true",
+    passwordRequireDigit: "true",
    passwordRequireSpecial: "false",
    disabledTools: "[]",
    enableExperimentalTools: "false",