alro65/AidsMonitoring
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
22 Commits 1 Branch 0 Tags
main
Commit Graph

7 Commits

Author SHA1 Message Date
alro65 cfd94f905a security: CORS hardening, path traversal fix, WebSocket auth + cleanup 
- Restrict CORS to localhost origins (was allow_origins=[*])
- Require valid JWT on WebSocket /ws (anonymous no longer gets admin view)
- Fix path traversal in delete_cell(): resolve() + parent check
- Validate cell_id format in /charts/download-noaa/{cell_id}
- Exclude charts/ and Cartas/ from git (keep US1GC09M world overview)
- Add NOAA ENC Portal external link in charts catalog tab
- Untrack __pycache__/, .db, .claude/ session files

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-07-03 12:45:43 -04:00
alro65 1f03a329b2 Security: SECRET_KEY obligatorio desde .env — sin fallback hardcodeado 2026-05-04 23:24:30 -04:00
alro65 d290c98784 Security: fix path traversal in chart_name 2026-05-04 23:19:03 -04:00
alro65 fcf1d2787a Initial commit — multi-tenant filtering, port constraints, chart bbox 2026-05-04 22:41:09 -04:00
alro65 aa1b93c7a8 feat: simplify range-daymark to concentric triangles; preserve land cache 
map.js — _encRangeDaymarkCanvas:
  Remove tripod legs, hub ring and mast. Symbol is now two clean
  concentric triangles pointing up: outer WHITE + inner BLACK,
  matching the standard IALA dayboard. Optional light flare at apex
  if the feature has LITCHR. No extra structures.

chart_manager.py — _build_cache:
  Don't overwrite existing land/hazard/zone GeoJSON files with an
  empty result when the .000 has no LNDARE/OBSTRN/ZONBND layer.
  Preserves hand-built or legacy cache data for custom charts
  (e.g. Barranquilla built from nav-aids-only CSV).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-30 16:19:01 -04:00
alro65 293b0c45ef fix(data): light info (LITCHR/range/height) en boyas y balizas de orilla 
frontend/js/map.js:
- Reemplaza merge exacto por merge de proximidad (~50m) en loadChartFeatures
  para capturar pares LIGHTS/BOYLAT con coordenadas no exactamente iguales
- Guard null-canvas en encStyle con fallback visible + console.warn
- Mejora JS de debug: log layer/aidType cuando usa fallback

backend/services/chart_manager.py:
- Expande extraccion de light_desc a category buoy+beacon+landmark
  (antes solo BOYLAT/BOYCAR; BCNLAT/BCNWTW/LNDMRK perdian LITCHR silenciosamente)
 2026-04-30 13:55:08 -04:00
alro65 8edb425c24 v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge 2026-04-30 13:50:01 -04:00