alro65 cfd94f905a security: CORS hardening, path traversal fix, WebSocket auth + cleanup ...

- Restrict CORS to localhost origins (was allow_origins=[*])
- Require valid JWT on WebSocket /ws (anonymous no longer gets admin view)
- Fix path traversal in delete_cell(): resolve() + parent check
- Validate cell_id format in /charts/download-noaa/{cell_id}
- Exclude charts/ and Cartas/ from git (keep US1GC09M world overview)
- Add NOAA ENC Portal external link in charts catalog tab
- Untrack __pycache__/, .db, .claude/ session files

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-03 12:45:43 -04:00

backend

security: CORS hardening, path traversal fix, WebSocket auth + cleanup

2026-07-03 12:45:43 -04:00

Cartas/FL/ENC_ROOT

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

charts

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

docs/references

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

frontend

security: CORS hardening, path traversal fix, WebSocket auth + cleanup

2026-07-03 12:45:43 -04:00

logs

Add background launcher scripts

2026-05-05 02:34:49 -04:00

tools/ais-catcher

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

_check_orient2.py

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

_check_orient.py

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

_check.py

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

_patch_ecdis_cartagena.py

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

_regen_ctg.py

Initial commit — multi-tenant filtering, port constraints, chart bbox

2026-05-04 22:41:09 -04:00

.env

Security: SECRET_KEY obligatorio desde .env — sin fallback hardcodeado

2026-05-04 23:24:30 -04:00

.gitignore

security: CORS hardening, path traversal fix, WebSocket auth + cleanup

2026-07-03 12:45:43 -04:00

Detener.bat

Add background launcher scripts

2026-05-05 02:34:49 -04:00

Iniciar.vbs

Auto-open browser after server start

2026-05-05 02:43:27 -04:00

install.bat

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

install.ps1

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

start.bat

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

test_enc.py

v1-base: estado funcional al 2026-04-30 — buoys 3D, beacons 3D, enfilaciones, land-clip, buoy light merge

2026-04-30 13:50:01 -04:00

Ver_Log.bat

Add background launcher scripts

2026-05-05 02:34:49 -04:00

S

Description

Maritime Aids-to-Navigation monitoring with AIS and S-57 ENC charts

178 MiB

Languages

JavaScript 50%

Python 36.6%

HTML 6.6%

CSS 5.4%

PowerShell 1.1%

Other 0.3%