cw2007/POSA_LEAKSMS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
3 commits 1 branch 0 tags 3.5 MiB
C 45.7%
PHP 39.9%
PowerShell 5.2%
CMake 4.2%
Python 3.5%
Other 1.5%
Find a file
유창욱 749b284941 fix(security): resolve review findings — TOTP example fail-closed, disable legacy sig, body cap 
다중 에이전트 보안 리뷰 후속 수정:
- (HIGH) config.local.example.php ADMIN_TOTP_SECRET '' 로 교체: 기존 플레이스홀더가
  Base32 디코드되어 실제 TOTP 코드를 생성(공개 시드로 MFA 활성화)하던 회귀를 차단.
  fail-closed(미설정 시 로그인 차단) + 회귀 테스트 추가.
- (MEDIUM) 레거시 키-접두 sha256 서명 경로를 ALLOW_LEGACY_BODY_SIGNATURE(기본 false)로
  게이트: X-Signature(HMAC) 없으면 거부.
- (LOW) 인증 전 본문 크기 상한 INGEST_MAX_BODY_BYTES(8KB) → 413.
- (LOW) heartbeat throttle 를 flock 기반 원자 판정으로 교체(중복 스캔 방지).
- (LOW) CRON_SECRET: md5 → hash_hmac('sha256','cron',API_KEY).
2026-06-20 10:00:52 +09:00
docs chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
firmware chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
php fix(security): resolve review findings — TOTP example fail-closed, disable legacy sig, body cap 2026-06-20 10:00:52 +09:00
scripts chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sql chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
tests fix(security): resolve review findings — TOTP example fail-closed, disable legacy sig, body cap 2026-06-20 10:00:52 +09:00
(20260518)_IoT_기반_모니터링_체계_구축을_위한_보안대책서.hwp chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
(Y수정)_(20260520)_IoT_기반_모니터링_체계_구축을_위한_보안대책서.hwp chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
(Y수정)_(20260528)_IoT_기반_모니터링_체계_구축을_위한_보안대책서.hwp chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
.gitignore chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
CHANGELOG.md fix(security): resolve review findings — TOTP example fail-closed, disable legacy sig, body cap 2026-06-20 10:00:52 +09:00
README.md first commit 2026-06-20 09:29:24 +09:00
report_leak_detection_system.md chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
VERSION chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00

README.md