Maximilian Stubhan
f96773da0f
Adds the Berichte export pipeline (/api/export/{report,events,employees})
with shared CSV/XLSX writers in lib/export.ts and lib/reports-data.ts.
Security pass alongside it: sanitize .or() search terms against PostgREST
filter injection, sanitize spreadsheet cells against CSV/Excel formula
injection, stop leaking raw DB error messages to clients, harden the
service-role client with server-only, add baseline security headers, and
bump the vulnerable nested postcss via an override.
45 lines
1.2 KiB
JSON
45 lines
1.2 KiB
JSON
{
|
|
"name": "alpenwerk-hr",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"test:integration": "node --env-file=.env.test.local node_modules/vitest/vitest.mjs run --config vitest.integration.config.ts",
|
|
"test:e2e": "playwright test",
|
|
"check": "npm run lint && npm run typecheck && npm run test && npm run build"
|
|
},
|
|
"dependencies": {
|
|
"@supabase/ssr": "^0.12.1",
|
|
"@supabase/supabase-js": "^2.110.5",
|
|
"exceljs": "^4.4.0",
|
|
"lucide-react": "^1.24.0",
|
|
"next": "16.2.10",
|
|
"react": "19.2.7",
|
|
"react-dom": "19.2.7",
|
|
"server-only": "^0.0.1"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/postcss": "^4.3.2",
|
|
"@types/node": "^24.13.3",
|
|
"@types/react": "^19.2.17",
|
|
"@types/react-dom": "^19.2.3",
|
|
"@vitest/coverage-v8": "^4.1.10",
|
|
"eslint": "^9.39.5",
|
|
"eslint-config-next": "16.2.10",
|
|
"postcss": "^8.5.19",
|
|
"supabase": "^2.109.1",
|
|
"tailwindcss": "^4.3.2",
|
|
"typescript": "^5.9.3",
|
|
"vitest": "^4.1.10"
|
|
},
|
|
"overrides": {
|
|
"postcss": "^8.5.19"
|
|
}
|
|
}
|