Marcel 64761d5c1f fix(notifications): clamp size param to max 100 on GET /api/notifications ...

NullX Finding 2: unbounded size param allowed full table scan. Added
spring-boot-starter-validation, @Validated on the controller, @Min(1) @Max(100)
on the size param, and ConstraintViolationException → 400 in GlobalExceptionHandler.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-29 19:12:14 +02:00

..

.mvn/wrapper

build: add mvn properties

2026-03-17 13:33:02 +00:00

api_tests

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

src

fix(notifications): clamp size param to max 100 on GET /api/notifications

2026-03-29 19:12:14 +02:00

.gitignore

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

Dockerfile

fix(backend): switch base image from alpine to debian for bash compatibility

2026-03-19 12:03:14 +01:00

HELP.md

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

mvnw

restructure: flatten workspace nesting, move devcontainer to root

2026-03-15 11:47:58 +01:00

mvnw.cmd

build: add mvn properties

2026-03-17 13:33:02 +00:00

pom.xml

fix(notifications): clamp size param to max 100 on GET /api/notifications

2026-03-29 19:12:14 +02:00