fusion44 c4afca50e9 fix(system): stop leaking passwords via change-password endpoint ... The change-password endpoint accepted old_password/new_password as bare str parameters, i.e. query parameters, so the passwords ended up in access logs, proxy logs and browser history. Accept them in a ChangePasswordInput request body instead. Also mark the RaspiBlitz blitz.passwords.sh check/set invocations sensitive=True so the plaintext passwords are not written to the debug log, and guard against a missing password type (was an AttributeError -> 500). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-03 21:42:25 +02:00
..
impl	fix(system): stop leaking passwords via change-password endpoint	2026-07-03 21:42:25 +02:00
__init__.py	refactor: switch to domain driven directory layout	2022-10-03 20:22:00 +02:00
docs.py	feat: implement Ruff as a linter; fix given errors	2023-06-25 07:17:00 +02:00
models.py	fix(system): stop leaking passwords via change-password endpoint	2026-07-03 21:42:25 +02:00
router.py	fix(system): stop leaking passwords via change-password endpoint	2026-07-03 21:42:25 +02:00
service.py	feat: replace call_script func with better func	2025-05-06 09:16:46 +02:00