Jens
faeb58ef6d
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 1m49s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m39s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 58m43s
15 lines
412 B
Markdown
15 lines
412 B
Markdown
# Security Checklist
|
|
|
|
## Verplicht
|
|
- Geen secrets committen.
|
|
- `.env.example` zonder echte keys.
|
|
- Uploadvalidatie op extensie/MIME waar mogelijk.
|
|
- Bestandspaden normaliseren; geen path traversal.
|
|
- Geen stacktraces naar frontend.
|
|
- CORS expliciet.
|
|
- Maximale uploadgrootte.
|
|
- Lange jobs via queue.
|
|
|
|
## Uploads V1
|
|
Toegestaan: GeoTIFF/TIFF, GeoJSON/JSON, GPKG later, Shapefile alleen als gevalideerde zip later.
|