inou/lib
James 93643d285b Code review 2026-02-28: fix critical/high findings + full review report
Critical fixes:
- CR-001: Remove auth backdoor code 250365 (lib/dbcore.go)

High fixes:
- HI-001: Fix CORS wildcard to use origin allowlist (portal/api_mobile.go, portal/mcp_http.go)
- HI-002: Fix LOINC skip logic - skip only if BOTH SearchKey2 AND LOINC are set (lib/normalize.go)

Also added:
- Full code review report at docs/CODE-REVIEW-2026-02-28.md

14 issues found: 2 critical, 4 high, 5 medium, 3 low
3 fixes applied, remaining are documented for follow-up
2026-02-28 07:20:38 -05:00
..
._db_schema.go Initial commit from dev 2026-02-01 08:03:12 +00:00
config.go Portal: upload handler, dossier rework, dashboard updates, normalize fixes 2026-02-25 20:01:11 -05:00
crypto.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
data.go.bak Refactor: Remove legacy v2, data, roles modules; update auth, queries, translations, portal MCP tools 2026-02-13 15:30:22 -05:00
db_auth.go Initial commit from dev 2026-02-01 08:03:12 +00:00
db_queries.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
db_schema.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
dbcore.go Code review 2026-02-28: fix critical/high findings + full review report 2026-02-28 07:20:38 -05:00
dicom.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
email.go Initial commit from dev 2026-02-01 08:03:12 +00:00
errors.go Initial commit from dev 2026-02-01 08:03:12 +00:00
files.go Initial commit from dev 2026-02-01 08:03:12 +00:00
journal.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
lab_reference.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
llm.go Portal: upload handler, dossier rework, dashboard updates, normalize fixes 2026-02-25 20:01:11 -05:00
normalize.go Code review 2026-02-28: fix critical/high findings + full review report 2026-02-28 07:20:38 -05:00
parse_numeric.go fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
rbac.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
roles.go.bak Refactor: Remove legacy v2, data, roles modules; update auth, queries, translations, portal MCP tools 2026-02-13 15:30:22 -05:00
signal.go Initial commit from dev 2026-02-01 08:03:12 +00:00
stubs.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
tracker.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
translate.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
types.go Lab reference charts, import tracking, DossierFromEntry consolidation 2026-02-24 05:15:03 -05:00
v2.go.bak Refactor: Remove legacy v2, data, roles modules; update auth, queries, translations, portal MCP tools 2026-02-13 15:30:22 -05:00