Michael Freno 9f65ebce5d FRE-5398: Fix invoice endpoint customer IDOR (M-3) ...

- Make verifyCustomerOwnership public in BillingService
- Add ownership verification before fetching invoice history
- Returns 403 if customerId does not belong to authenticated user

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-16 09:57:57 -04:00

..

__tests__

Fix SMS classifier test mock: add defaultScores and metadataLimits exports (FRE-4509)

2026-05-02 20:23:29 -04:00

config

Fix CORS origin trimming, unused import, and fragile error handling (FRE-4749)

2026-05-10 02:58:02 -04:00

lib

Add ShieldAI browser extension with phishing & spam detection (FRE-4576)

2026-05-09 21:53:29 -04:00

middleware

Fix P1 security findings for FRE-4806

2026-05-12 12:42:42 -04:00

routes

FRE-5398: Fix invoice endpoint customer IDOR (M-3)

2026-05-16 09:57:57 -04:00

services

VoicePrint: Quality improvements P2-1-5, P3-2 (FRE-5006)

2026-05-14 07:12:31 -04:00

index.ts

Fix dd-trace init timing in index.ts (FRE-4806)

2026-05-11 02:58:51 -04:00

seed.ts

ShieldAI waitlist landing page and analytics infrastructure FRE-5274

2026-05-13 23:47:25 -04:00

server.ts

ShieldAI waitlist landing page and analytics infrastructure FRE-5274

2026-05-13 23:47:25 -04:00