Security-Seite: Reichweiten-/Access-Control-Check (nur Booleans+Anzahl, keine Werte) - Profil-Privinfelder, Foto-IDOR, LV-Plan, Directory, anonyme iCal, Klassenliste

2026-10-22 10:04:25 +02:00
parent 5b036024ec
commit 3af3c26304
6 changed files with 174 additions and 0 deletions
@@ -19,6 +19,7 @@
      <a href="/stg" class="{{ 'active' if path.startswith('/stg') }}">Studiengänge</a>
      <a href="/liste" class="{{ 'active' if path.startswith('/liste') }}">Namenslisten</a>
      <a href="/fotos" class="{{ 'active' if path.startswith('/fotos') }}">Fotos</a>
+      <a href="/security" class="{{ 'active' if path.startswith('/security') }}">Security</a>
      <a href="/" class="{{ 'active' if path == '/' }}">Start</a>
    </nav>
  </div>