- core/views.py: fix open redirect in login — validate next_url with
url_has_allowed_host_and_scheme before redirecting
- visit_manager/api/views.py: add explicit permission_classes/
authentication_classes on all 3 API views; add MIME magic-byte
validation + Pillow verify for photo uploads; validate employee_id/
location_id/date query params; restrict photo access to is_staff,
own record, or direct manager
- employees/serializers.py: split into EmployeeSerializer (public
fields only) and EmployeeDetailSerializer (PII fields, for HR/admin)
- mattermost_service.py: sanitize sensitive fields (password, token)
before logging; log only error message not full response body
- settings/base.py: add SESSION/CSRF cookie HttpOnly + SameSite flags;
set file upload size limits (15MB); remove BasicAuthentication from
DRF (sends credentials in plaintext)
lokses
faa06b9f82