4 Commits

Author	SHA1	Message	Date
canglan	ed6fe9dcf1	fix: admin/owner skip rate limiting, anon 10/min	2026-07-17 21:51:32 +08:00
canglan	eed4591059	security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy	2026-07-13 19:49:44 +08:00
canglan	532efb962f	fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook	2026-07-13 03:49:02 +08:00
canglan	247a4e851d	feat: MC Report System - MySQL + Express + Vanilla JS SPA	2026-07-12 01:23:19 +08:00