Thanakorn f11af6e949 Self-host front-end libraries, minimal sign-in header and CSP ...

- sign-in pages load only what they use (include_login_header.php, ajax_core.js)
- every library, font and data file served from assets/vendor with pinned
  versions (VERSIONS.json); no CDN at runtime
- Content-Security-Policy on app, sign-in and landing pages
- remove httpbin Dropzone target and source-map references

2026-09-24 14:53:41 +07:00

..

ac_dashboard

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

accounting

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

assets

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

contact

Enforce roles on admin endpoints and return real status codes

2026-09-24 14:53:40 +07:00

cron

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

dashboard

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

expense

Enforce roles on admin endpoints and return real status codes

2026-09-24 14:53:40 +07:00

finance

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

ics

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

inventory

Enforce roles on admin endpoints and return real status codes

2026-09-24 14:53:40 +07:00

journal

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

login

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

order

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

po

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00

reports

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

revenue

Enforce roles on admin endpoints and return real status codes

2026-09-24 14:53:40 +07:00

setting

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

config.example.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

dbconn.php

Fix QA review findings: server-side validation, notes encoding, dashboard totals

2026-09-19 10:58:42 +07:00

file.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

include_ending.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

include_header.php

Self-host front-end libraries, minimal sign-in header and CSP

2026-09-24 14:53:41 +07:00

include_master_sidebar.php

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

include_setting_sidebar.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

include_sidebar_ac.php

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

include_sidebar.php

Seed Demo Data - Rebranding

2026-08-17 13:12:07 +07:00

include_topbar.php

Harden web root, secrets and realtime auth

2026-09-24 14:53:40 +07:00

index.php

init wms

2026-02-19 14:48:40 +07:00

preset.php

JSON output

2026-05-13 16:41:28 +07:00

session.php

Start every session through session.php; idle timeout, app access and auth status codes

2026-09-24 14:30:35 +07:00