Commit Graph

10 Commits

Author SHA1 Message Date
0577464ec5 refactor: stabilize legacy-core linking and header ownership
- Make include/ the canonical declarations for data_model/html_util/json_codec and convert dd3_legacy_core header copies to thin forwarders.
- Add stable public forwarders for app_context/receiver_pipeline/sender_state_machine and update refactor smoke test to stop using ../../src includes.
- Force-link dd3_legacy_core from setup() to ensure deterministic PlatformIO LDF linking across firmware envs.
- Refresh docs (README, Requirements, docs/TESTS.md) to reflect current module paths and smoke-test include strategy.
2026-02-20 23:29:50 +01:00
b8e0733a89 test: add json stability and discovery payload coverage 2026-02-20 21:32:35 +01:00
ca2cd1880a test: add lora frame and chunk reassembly logic suite 2026-02-20 21:26:51 +01:00
cef1d184ed test: add payload codec regression suite 2026-02-20 21:22:10 +01:00
6acb588069 refactor: move html_util into legacy core library 2026-02-20 21:17:48 +01:00
2cfdc719c2 test: expand legacy html_util coverage 2026-02-20 21:13:48 +01:00
9495e7e8de chore: unify HA manufacturer and add refactor guards 2026-02-18 02:25:07 +01:00
4ff5fd1d55 Harden history device ID validation and SD download filename 2026-02-13 23:56:36 +01:00
bfcb2463c3 Harden web UI auth, input handling, and SD path validation
- Add optional Basic Auth with NVS-backed credentials and STA/AP flags; protect status, wifi, history, and download routes

- Stop pre-filling WiFi/MQTT/Web UI password fields; keep stored secrets on blank and add clear-password checkboxes

- Add HTML escaping + URL encoding helpers and apply to user-controlled strings; add unit test

- Harden /sd/download path validation (prefix, length, dotdot, slashes) and log rejections

- Enforce protocol version in LoRa receive and release GPIO14 before SD init

- Update README security, SD, and GPIO sharing notes
2026-02-13 23:56:36 +01:00
6f308ad590 Initial commit 2026-01-20 01:39:06 +01:00