9 Commits

Include renames

Author	SHA1	Message	Date
k3nnyandClaude	d5e341b9e8	fix(security): remove hardcoded Flask secret key ... Replace hardcoded Flask secret key with environment variable to prevent session hijacking and CSRF attacks. Changes: - Load secret key from TISBACKUP_SECRET_KEY environment variable - Fall back to cryptographically secure random key using secrets module - Log warning when random key is used (sessions won't persist) - Add environment variable example to README.md Docker Compose config - Add setup instructions in Configuration section Security improvements: - Eliminates hardcoded secret in source code - Uses secrets.token_hex(32) for cryptographically strong random generation - Sessions remain secure even without env var (though won't persist) - Prevents session hijacking and CSRF bypass attacks Documentation: - Update README.md with TISBACKUP_SECRET_KEY setup instructions - Include command to generate secure random key - Update SECURITY_IMPROVEMENTS.md with implementation details - Mark hardcoded secret key issue as resolved Setup: ```bash # Generate secure key python3 -c "import secrets; print(secrets.token_hex(32))" # Set in environment export TISBACKUP_SECRET_KEY=your-key-here ``` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-05 01:29:16 +02:00
k3nny	da50051a3f	Python 3.13 + add nginx reverse-proxy	2025-03-07 22:24:27 +01:00
k3nny	8ef9bbde06	improve README.md	2024-11-30 00:20:51 +01:00
Vincent CARDON	4e4165958b	README.md and tranquil-it-contacts.rst	2020-11-23 15:34:28 +01:00
Vincent CARDON	ee7dd47a3b	Mise à jour de 'README.md'	2020-11-20 14:52:00 +01:00
Vincent CARDON	90631ba547	README.md	2020-11-20 10:58:47 +01:00
ssamson-tis	22cbd2ff07	Modification du README	2013-05-23 10:24:24 +02:00
ssamson-tis	bd05ae8f25	Fist commit	2013-05-23 10:19:43 +02:00
Vincent CARDON	cd150a78f2	Initial commit	2012-08-30 08:34:39 -07:00