Security & Hardening

New issue

Durcissement auth/session, headers web, secrets et upgrades de securite.

No due date

0% Completed

6 Open 0 Closed

Label

Show archived labels

Use alt + click/enter to exclude labels

All labels No label

area: auth

area: deps

area: frontend

area: gameplay

area: import

area: infra

area: product

area: tests

priority: P0

priority: P1

priority: P2

priority: P3

type: bug

type: chore

type: feature

type: infrastructure

type: performance

type: security

Project

All projects No project

Author

All authors

Assignee

All assignees No assignee

thibaud-lclr

Sort

Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Mettre a jour @hotwired/turbo et verifier le risque de restauration de session

area: frontend

priority: P3

type: security

#18 opened 2026-04-12 18:10:04 +00:00 by thibaud-lclr

Mettre a jour les dependances PHP vulnerables signalees par composer audit

area: deps

priority: P1

type: security

#17 opened 2026-04-12 18:10:03 +00:00 by thibaud-lclr

Ajouter des headers HTTP de securite et preparer une CSP stricte

area: frontend

priority: P1

type: security

#10 opened 2026-04-12 18:09:05 +00:00 by thibaud-lclr

Supprimer les credentials par defaut et durcir la configuration Docker/infra

area: infra

priority: P1

type: security

#11 opened 2026-04-12 18:09:05 +00:00 by thibaud-lclr

Durcir l'authentification : throttling, politique mot de passe et recouvrement

area: auth

priority: P0

type: security

#8 opened 2026-04-12 18:09:04 +00:00 by thibaud-lclr

Proteger le logout et aligner les flux CSRF d'authentification

area: auth

priority: P1

type: security

#9 opened 2026-04-12 18:09:04 +00:00 by thibaud-lclr