This repository is maintained as a legacy educational and portfolio project. No released version is currently supported for security-sensitive production use.
| Version | Supported |
|---|---|
master |
Best-effort fixes |
| Published releases | No |
Use GitHub's Report a vulnerability feature on the repository's Security tab when available. If private reporting is not enabled, contact the repository owner privately through their GitHub profile. Do not include credentials, personal data, or an exploit in a public issue.
Please include the affected component, impact, reproduction steps, and any suggested mitigation. You should receive an acknowledgement within 14 days.
The application depends on an old ASP.NET MVC/Serenity stack and legacy browser libraries. Before any public deployment:
- Upgrade or replace unsupported dependencies.
- Rotate every credential that has ever appeared in repository history.
- Use deployment-time secrets and HTTPS-only cookies.
- Add automated authentication, authorization, upload, and migration tests.
- Perform a current dependency and application security review.