thibaud-lclr/ltbxd-actorle

Security & Hardening

New issue

Durcissement auth/session, headers web, secrets et upgrades de securite.

No due date

0% Completed

Mettre a jour @hotwired/turbo et verifier le risque de restauration de session

#18 opened 2026-04-12 18:10:04 +00:00 by thibaud-lclr

Mettre a jour les dependances PHP vulnerables signalees par composer audit

#17 opened 2026-04-12 18:10:03 +00:00 by thibaud-lclr

Ajouter des headers HTTP de securite et preparer une CSP stricte

#10 opened 2026-04-12 18:09:05 +00:00 by thibaud-lclr

Supprimer les credentials par defaut et durcir la configuration Docker/infra

#11 opened 2026-04-12 18:09:05 +00:00 by thibaud-lclr

Durcir l'authentification : throttling, politique mot de passe et recouvrement

#8 opened 2026-04-12 18:09:04 +00:00 by thibaud-lclr

Proteger le logout et aligner les flux CSRF d'authentification

#9 opened 2026-04-12 18:09:04 +00:00 by thibaud-lclr