fs a0cb345e04 fix(helpdesk): use strict input validation for all user-supplied customerNo in OData filters ...

Replaces escapeODataTrustedLiteral with escapeODataStrictUserInput for all
customerNo parameters that originate from HTTP request input. The trusted
literal escape (quote-only) remains for BC-sourced values like customerName.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-13 15:07:40 +02:00

..

addressbook

feat: centralize breadcrumbs in topbar and remove history navigation

2026-04-05 17:17:06 +02:00

api-docs

feat: centralize breadcrumbs in topbar and remove history navigation

2026-04-05 17:17:06 +02:00

audit

feat(scheduler): dispatch event on job failure, notify admins via notifications module

2026-04-06 12:26:54 +02:00

bookmarks

refactor(ui): consistent outline/fill icons in topbar, remove dropdown chevrons, truncate breadcrumbs

2026-04-06 22:21:50 +02:00

help-center

feat(guards): add GR-SEC-010 — output escaping enforcement in views

2026-04-06 12:08:25 +02:00

helpdesk

fix(helpdesk): use strict input validation for all user-supplied customerNo in OData filters

2026-04-13 15:07:40 +02:00

notifications

refactor(ui): consistent outline/fill icons in topbar, remove dropdown chevrons, truncate breadcrumbs

2026-04-06 22:21:50 +02:00