8 Commits

Author	SHA1	Message	Date
acidburns	ca2cd1880a	test: add lora frame and chunk reassembly logic suite	2026-02-20 21:26:51 +01:00
acidburns	cef1d184ed	test: add payload codec regression suite	2026-02-20 21:22:10 +01:00
acidburns	6acb588069	refactor: move html_util into legacy core library	2026-02-20 21:17:48 +01:00
acidburns	2cfdc719c2	test: expand legacy html_util coverage	2026-02-20 21:13:48 +01:00
acidburns	9495e7e8de	chore: unify HA manufacturer and add refactor guards	2026-02-18 02:25:07 +01:00
acidburns	4ff5fd1d55	Harden history device ID validation and SD download filename	2026-02-13 23:56:36 +01:00
acidburns	bfcb2463c3	Harden web UI auth, input handling, and SD path validation ... - Add optional Basic Auth with NVS-backed credentials and STA/AP flags; protect status, wifi, history, and download routes - Stop pre-filling WiFi/MQTT/Web UI password fields; keep stored secrets on blank and add clear-password checkboxes - Add HTML escaping + URL encoding helpers and apply to user-controlled strings; add unit test - Harden /sd/download path validation (prefix, length, dotdot, slashes) and log rejections - Enforce protocol version in LoRa receive and release GPIO14 before SD init - Update README security, SD, and GPIO sharing notes	2026-02-13 23:56:36 +01:00
acidburns	6f308ad590	Initial commit	2026-01-20 01:39:06 +01:00