5 Commits

Author	SHA1	Message	Date
canglan	eed4591059	security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy	2026-07-13 19:49:44 +08:00
canglan	532efb962f	fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook	2026-07-13 03:49:02 +08:00
canglan	ea3cd67e02	feat: external API for Java server integration with dedicated key	2026-07-13 01:24:03 +08:00
canglan	aa9ee24118	fix: disable all static file caching to prevent stale assets	2026-07-12 02:08:18 +08:00
canglan	247a4e851d	feat: MC Report System - MySQL + Express + Vanilla JS SPA	2026-07-12 01:23:19 +08:00