During March 2025, Tao Teg worked on the TACC/Core-Portal repository, focusing on backend development and security enhancements using Python and Elasticsearch. Tao addressed a deprecation issue by updating the Elasticsearch analyzer configuration to use the 'ngram' tokenizer, ensuring compatibility with Elasticsearch 8.17+ and stabilizing the portal setup process. In parallel, Tao implemented cookie security hardening by enforcing HTTPS-only transmission for session and CSRF cookies and restricting client-side access to CSRF tokens. These changes directly responded to vulnerability scan findings, reducing the risk of CSRF and session hijacking while improving the maintainability and future compatibility of the portal’s security architecture.