Issues

• [Security] Fix Python 3.14 test failures and add security regression tests

  bug
  pvarki/tak-webview-cesium#67 · Filter by author sgofferj opened on Nov 8, 2026

• [Enhancement] Add opt-in TAK server certificate verification with CA bundle or pinned cert

  enhancement
  pvarki/tak-webview-cesium#66 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Strengthen password policy and add authentication audit logging

  bug
  pvarki/tak-webview-cesium#65 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Stop leaking pinned/forced TAK server to unauthenticated callers

  bug
  pvarki/tak-webview-cesium#64 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Reduce account enumeration and timing differences

  bug
  pvarki/tak-webview-cesium#63 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Harden session cookies, CORS, CSRF, and WebSocket origin checks

  bug
  pvarki/tak-webview-cesium#62 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Harden first-use server pinning against caller-controlled hosts

  bug
  pvarki/tak-webview-cesium#61 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Persist quarantine state across restarts

  bug
  pvarki/tak-webview-cesium#60 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Strengthen login and enrollment throttling

  bug
  pvarki/tak-webview-cesium#59 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Canonicalize usernames to prevent case and Unicode aliasing

  bug
  pvarki/tak-webview-cesium#58 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Cap .p12 upload size

  bug
  pvarki/tak-webview-cesium#57 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Validate uploaded .p12 certificate chains and metadata

  bug
  pvarki/tak-webview-cesium#56 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Allow expired certificates to renew instead of blocking login

  bug
  pvarki/tak-webview-cesium#55 · Filter by author sgofferj opened on Nov 8, 2026

• [Security] Require proof of ownership when replacing an existing user's .p12

  bug
  pvarki/tak-webview-cesium#54 · Filter by author sgofferj opened on Nov 8, 2026