samwaf c8dc8853c4 fix(security): bcrypt password hashing + server-side forced password change ...

- Migrate MD5+global-salt hashing to bcrypt with transparent upgrade on login
- Enforce password change in Auth middleware (allow only changepwd/logout/ws)
- Generate random initial admin password on fresh install (data/initial_password.txt)

2026-07-03 14:47:59 +08:00

..

samwaf

fix(security): bcrypt password hashing + server-side forced password change

2026-07-03 14:47:59 +08:00

tools/pack_owasp

feat: owaspruleset

2026-04-22 15:55:58 +08:00