scripte/timemaster - timemaster - Gitea: Git with a cup of tea

scripte/timemaster

T

patrick 4dc69137dd security: H-1 settings-Whitelist + H-5 UUID-Guard + H-6 DNS-Pinning + H-7 Heartbeat-Timing

H-1: company.settings als typisiertes Sub-Schema
- schemas/company.py: CompanySettingsUpdate mit extra=forbid
- Nur bekannte Keys (carryover_expires_month/day) erlaubt
- Unbekannte Keys → HTTP 422

H-5: SQL-Injection defensiv absichern
- dependencies.py: UUID-Round-Trip str(_uuid.UUID(...)) + Sicherheitskommentar

H-6: CalDAV DNS-Rebinding-Schutz
- caldav_service.py: PinnedIPTransport — IP einmal auflösen, beim Request fixieren
- _validate_caldav_url gibt aufgelöste IP zurück
- Alle HTTP-Methoden nutzen PinnedIPTransport

H-7: Heartbeat-Timestamp nach Route-Logik
- kiosk_security.py: last_heartbeat_at-Update aus Dependency entfernt
- kiosk_service.py: Update erst in process_heartbeat() nach erfolgreicher Auth

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-26 11:35:18 +02:00

security: H-1 settings-Whitelist + H-5 UUID-Guard + H-6 DNS-Pinning + H-7 Heartbeat-Timing

2026-05-26 11:35:18 +02:00

docs: CalDAV-Konfiguration und CALDAV_ALLOWED_CIDRS in deployment.md

2026-05-24 13:04:20 +02:00

security: M-2 HttpOnly-Cookie + M-4 TrustedHost-Warning + M-5 TOTP-Lockout + M-7 zentraler get_client_ip()

2026-05-26 11:25:24 +02:00

add deployment updater scripts

2026-05-23 21:16:24 +02:00

.gitignore

chore: .claude/ aus Git-Tracking entfernen

2026-05-26 10:42:04 +02:00

.timetrack.json

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

backup.sh

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

deploy.sh

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

dev_session_doc.py

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

dev_weekly.py

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

DEVLOG.md

security: H-1 settings-Whitelist + H-5 UUID-Guard + H-6 DNS-Pinning + H-7 Heartbeat-Timing

2026-05-26 11:35:18 +02:00

nginx.conf

feat: FZA Einzelstunden + Security-Fixes (K-1–K-5, H-2–H-4, M-1/M-3/M-6)

2026-05-26 11:13:42 +02:00

README.md

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

remote.sh

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

resume

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

ROADMAP.md

docs: ROADMAP.md angelegt – alle Features in Planung

2026-05-25 01:22:48 +02:00

setup_server.sh

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

TEST_USERS.md

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

timemaster.service

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

timetrack.py

Initial commit – TimeMaster Zeiterfassung & HR-Tool

2026-05-23 20:03:27 +02:00

update.sh

update.sh: switch backend sync to git pull instead of rsync

2026-05-23 21:31:11 +02:00

README.md

The file is empty.