inou/portal
James 93643d285b Code review 2026-02-28: fix critical/high findings + full review report
Critical fixes:
- CR-001: Remove auth backdoor code 250365 (lib/dbcore.go)

High fixes:
- HI-001: Fix CORS wildcard to use origin allowlist (portal/api_mobile.go, portal/mcp_http.go)
- HI-002: Fix LOINC skip logic - skip only if BOTH SearchKey2 AND LOINC are set (lib/normalize.go)

Also added:
- Full code review report at docs/CODE-REVIEW-2026-02-28.md

14 issues found: 2 critical, 4 high, 5 medium, 3 low
3 fixes applied, remaining are documented for follow-up
2026-02-28 07:20:38 -05:00
..
bin Initial commit 2026-02-01 02:43:27 -05:00
lang import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00
static import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00
templates import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00
access_log.go Initial commit 2026-02-01 02:43:27 -05:00
api_client.go Initial commit 2026-02-01 02:43:27 -05:00
api_mobile.go Code review 2026-02-28: fix critical/high findings + full review report 2026-02-28 07:20:38 -05:00
api_proxy.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
defense.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
dossier_sections.go import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00
genome.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
import_json.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
inou-portal Initial commit 2026-02-01 02:43:27 -05:00
main.go import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00
main.go.bak Initial commit 2026-02-01 02:43:27 -05:00
mcp_http.go Code review 2026-02-28: fix critical/high findings + full review report 2026-02-28 07:20:38 -05:00
mcp_tools.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
oauth.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
portal Initial commit 2026-02-01 02:43:27 -05:00
trackers.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
upload.go import-renpho, v2 readings API, dashboard lab chips, portal updates 2026-02-28 04:54:58 -05:00