mirror of
https://github.com/thecyberlearn/quantum-ai.git
synced 2026-08-18 10:52:58 +00:00
Critical Security Fixes: - Fix CSRF webhook vulnerability with IP validation and rate limiting - Secure debug endpoint with superuser-only access and data masking - Add rate limiting to all payment operations (5/min for top-up, 10/min for success) - Replace debug print statements with secure logging throughout Security Enhancements: - Stripe webhook IP whitelist validation with current IP ranges - Content type and payload size validation for webhooks - Comprehensive error handling with sanitized error messages - Proper logging for all payment operations and security events Payment System Improvements: - Enhanced duplicate payment prevention - Improved error handling and user feedback - Secure session verification and balance updates - Comprehensive audit trail for all payment operations 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| migrations | ||
| __init__.py | ||
| admin.py | ||
| apps.py | ||
| models.py | ||
| stripe_handler.py | ||
| tests.py | ||
| urls.py | ||
| views.py | ||