ScreenTinker 470197d203 Fix 8 security findings from Phase 3 audit + device-detail banner refresh ... Security fixes: - Critical: Add ownership checks to assignments PUT/:id and DELETE/:id (IDOR) - Critical: Add ownership checks to assignments copy-to endpoint for both devices - High: Validate device ownership when adding to device groups - High: UUID-validate content ID before LIKE query + scope to owner's playlists - Low: Handle FK violations gracefully in playlist discard (deleted content/widgets) - Low: Escape mime_type with esc() in playlist item display (XSS) Bug fix: - Device-detail mutation handlers now reload full page to show draft banner Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-04-13 21:36:16 -05:00
..
assets	Initial open source release	2026-04-08 12:14:53 -05:00
css	Initial open source release	2026-04-08 12:14:53 -05:00
js	Fix 8 security findings from Phase 3 audit + device-detail banner refresh	2026-04-13 21:36:16 -05:00
legal	Initial open source release	2026-04-08 12:14:53 -05:00
index.html	Add Playlists nav entry to sidebar between Content and Layouts	2026-04-11 21:15:25 -05:00
landing.html	Initial open source release	2026-04-08 12:14:53 -05:00
manifest.json	Initial open source release	2026-04-08 12:14:53 -05:00
robots.txt	Initial open source release	2026-04-08 12:14:53 -05:00
sitemap.xml	Initial open source release	2026-04-08 12:14:53 -05:00
sw-admin.js	Initial open source release	2026-04-08 12:14:53 -05:00