audit: money-correctness fixes — DO NOT MERGE before ACTION_REQUIRED.md §0 by hasan-ismail · Pull Request #3 · OpenMasjid-Solutions/OpenMasjidDonations

docs(audit): full security + code-health audit report (52 findings)

hasan-ismail

committed

0ccf74e

fix(security): never cache donor records — no-store on the ledger + CSV export [DONATIONS-003]

hasan-ismail

committed

249e8e5

fix(security): send nosniff + no-referrer on every response [DONATIONS-014, DONATIONS-030]

hasan-ismail

committed

8137bef

fix(security): rate-limit the unauthenticated platform probes, the Stripe webhook, and monthly intents [DONATIONS-019, DONATIONS-020, DONATIONS-010]

hasan-ismail

committed

23a4a30

fix(security): make the login limiter's sweep actually sweep, without releasing a live lockout [DONATIONS-017]

hasan-ismail

committed

41f8b44

fix(security): gate refresh=1 on the same-origin check, and tighten requestTimeout [DONATIONS-018, DONATIONS-021]

hasan-ismail

committed

64f037d

fix(security): a donor name can no longer inject an email header via the receipt subject [DONATIONS-023]

hasan-ismail

committed

84bcae6

fix(security): the admin session cookie is Secure when the request arrived over TLS [DONATIONS-012]

hasan-ismail

committed

70d5457

fix(security): append-only audit log for every admin financial and donor-data action [DONATIONS-011]

hasan-ismail

committed

87033d3

test(money): cover every currency conversion, and pin the two known-wrong ones [DONATIONS-044]

hasan-ismail

committed

ad80f17

fix(security): bump the fixable advisories, keep .env out of the image, lock the data dir to 0700 [DONATIONS-041, DONATIONS-042, DONATIONS-027, DONATIONS-028]

hasan-ismail

committed

73cc072

fix(security): pin every Action in the image-publishing job to a commit SHA [DONATIONS-004]

hasan-ismail

committed

73086c5

fix(security): weekly dependency audit workflow, and survive a stray promise rejection [DONATIONS-043, DONATIONS-029]

hasan-ismail

committed

2924f79

fix(security): stop the receipt and tuition outboxes overlapping themselves [DONATIONS-052]

hasan-ismail

committed

decfaab

docs(audit): remediation record, action-required list, and machine-readable findings

hasan-ismail

committed

14f0907

fix(money): charge the intended amount in three-decimal currencies, and stop dropping the fixed fee [DONATIONS-001, DONATIONS-008]

hasan-ismail

committed

db3cecd

fix(money): sweep for one-time donations Stripe took but we never recorded [DONATIONS-002]

hasan-ismail

committed

6e07c4f

Navigation Menu

Uh oh!

audit: money-correctness fixes — DO NOT MERGE before ACTION_REQUIRED.md §0 - #3

audit: money-correctness fixes — DO NOT MERGE before ACTION_REQUIRED.md §0#3
osayed0001 merged 17 commits into
mainfrom
audit/money-2026-08-03

Commits on Aug 3, 2026

docs(audit): full security + code-health audit report (52 findings)

fix(security): never cache donor records — no-store on the ledger + CSV export [DONATIONS-003]

fix(security): send nosniff + no-referrer on every response [DONATIONS-014, DONATIONS-030]

fix(security): rate-limit the unauthenticated platform probes, the Stripe webhook, and monthly intents [DONATIONS-019, DONATIONS-020, DONATIONS-010]

fix(security): make the login limiter's sweep actually sweep, without releasing a live lockout [DONATIONS-017]

fix(security): gate refresh=1 on the same-origin check, and tighten requestTimeout [DONATIONS-018, DONATIONS-021]

fix(security): a donor name can no longer inject an email header via the receipt subject [DONATIONS-023]

fix(security): the admin session cookie is Secure when the request arrived over TLS [DONATIONS-012]

fix(security): append-only audit log for every admin financial and donor-data action [DONATIONS-011]

test(money): cover every currency conversion, and pin the two known-wrong ones [DONATIONS-044]

fix(security): bump the fixable advisories, keep .env out of the image, lock the data dir to 0700 [DONATIONS-041, DONATIONS-042, DONATIONS-027, DONATIONS-028]

fix(security): pin every Action in the image-publishing job to a commit SHA [DONATIONS-004]

fix(security): weekly dependency audit workflow, and survive a stray promise rejection [DONATIONS-043, DONATIONS-029]

fix(security): stop the receipt and tuition outboxes overlapping themselves [DONATIONS-052]

docs(audit): remediation record, action-required list, and machine-readable findings

fix(money): charge the intended amount in three-decimal currencies, and stop dropping the fixed fee [DONATIONS-001, DONATIONS-008]

fix(money): sweep for one-time donations Stripe took but we never recorded [DONATIONS-002]