This is an automated email from the ASF dual-hosted git repository. Aman-Mittal pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/fineract-loan-origination.git
commit bb44b823717153ebd52da67292dbf965707575ee Merge: b289efc d4a5b87 Author: Aman-Mittal <[email protected]> AuthorDate: Tue Aug 18 07:54:14 2026 +0530 Merge pull request #78 from KRYSTALM7/feature/FINERACT-2442-updates-security FINERACT-2442 security hardening input validation, tenant isolation, rate limiting, XSS protection, and security headers pom.xml | 18 + .../fineract/los/api/ApprovalController.java | 5 +- .../los/api/CustomerLoanApplicationController.java | 7 +- .../fineract/los/api/DisbursementController.java | 3 +- .../los/api/LoanApplicationController.java | 9 +- .../apache/fineract/los/config/SecurityConfig.java | 72 +++- .../los/dto/request/ApprovalDecisionRequest.java | 8 +- .../dto/request/CreateLoanApplicationRequest.java | 40 +- .../fineract/los/security/CustomerPrincipal.java | 8 +- .../los/security/FineractUserDetailsService.java | 2 +- .../fineract/los/security/JwtAuthFilter.java | 24 +- .../los/security/MockCustomerIdentityService.java | 2 +- .../fineract/los/security/RateLimitFilter.java | 185 +++++++++ .../apache/fineract/los/security/XssSanitizer.java | 110 ++++++ .../los/validation/ValidApplicationRef.java | 73 ++++ .../los/validation/InputValidationTest.java | 427 +++++++++++++++++++++ 16 files changed, 968 insertions(+), 25 deletions(-)
