Marijn 89e7dd09ba Add rate limiting to login and season-code entry points ...

Neither /login nor the public season-code guess form (POST /) had
any throttling, making both an unlimited brute-force/enumeration
oracle. Adds symfony/rate-limiter and enables login_throttling on
the main firewall, plus a dedicated per-IP rate limiter on the
season-code form.

2026-07-13 09:56:39 +02:00

..

Command

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

Controller

Add rate limiting to login and season-code entry points

2026-07-13 09:56:39 +02:00

Entity

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

Helpers

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00

Repository

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

Security

Add fullscreen toggle and return-to-page logout redirect (#200)

2026-07-09 21:30:06 +00:00

Service

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00

Twig

Add missing quiz/nav.html.twig and test for template reference integrity (#166)

2026-07-02 21:08:21 +00:00

bootstrap.php

PHP 8.4

2025-06-07 22:24:38 +02:00

object-manager.php

- Refactor ORM annotations across entities for consistency.

2025-10-04 12:40:45 +02:00

symfony-container.php

Add Symfony container support for Rector configuration

2025-10-08 20:50:33 +02:00