davide d4b3398de5 fix(security): enforce order status state machine in admin endpoint ...

Add VALID_TRANSITIONS map and validate each status change before updating
the database. Prevents skipping payment (e.g. PENDING→FULFILLED) or
reopening closed orders.

2026-05-19 10:11:16 +02:00

..

app

fix(security): enforce order status state machine in admin endpoint

2026-05-19 10:11:16 +02:00

components

fix(security): replace localStorage user state with server-side session

2026-05-19 10:10:24 +02:00

context

fix(security): replace localStorage user state with server-side session

2026-05-19 10:10:24 +02:00

lib

fix(security): replace in-memory rate limiting with persistent DB-backed limiter

2026-05-19 10:10:57 +02:00

middleware.ts

fix(security): add HTTP security headers (CSP, HSTS, X-Frame-Options)

2026-05-19 10:10:08 +02:00