pediatric-ai-scribe-v3/public
Daniel Onyejesi 15494b4675 Security fixes: remove SSO token from URL, add prompt boundaries
- OIDC callback now passes only ?sso=ok flag, token stays in
  httpOnly cookie (prevents token leaking to logs/referrer/history)
- Frontend auth.js uses cookie-based auth for SSO flow
- Add [PHYSICIAN TEMPLATES] boundary markers around physicianMemories
  in all 5 generation routes to mitigate prompt injection
- Consistent boundary format across wellVisit, sickVisit, hpi, soap,
  hospitalCourse
2026-03-25 19:25:49 -04:00
..
components Fix CMS button clickability, replace AI topic input with context box 2026-03-24 11:52:02 -04:00
css Fix CMS button clickability, replace AI topic input with context box 2026-03-24 11:52:02 -04:00
icons Feat: add stethoscope+pencil favicon in SVG, ICO, and PNG sizes 2026-03-22 14:09:18 -04:00
js Security fixes: remove SSO token from URL, add prompt boundaries 2026-03-25 19:25:49 -04:00
vendor Replace Quill with Tiptap rich text editor 2026-03-23 23:32:41 -04:00
404.html Add proper 404 handling and custom error page 2026-03-23 23:47:50 -04:00
favicon.ico Feat: add stethoscope+pencil favicon in SVG, ICO, and PNG sizes 2026-03-22 14:09:18 -04:00
index.html Add OpenID Connect SSO + Firefox speech notice 2026-03-25 18:54:44 -04:00
manifest.json v2.0.0: Pediatric AI Scribe 2026-03-21 16:55:50 -04:00
sw.js Fix: service worker only intercepts same-origin requests, preventing CDN fetch errors 2026-03-22 00:41:24 -04:00