11 Commits

Author	SHA1	Message	Date
canglan	880e3905dc	fix: CSP scriptSrcAttr explicitly allow unsafe-inline	2026-07-15 04:39:23 +08:00
canglan	c892b18d33	fix: CSP script-src-attr:none blocked all onclick handlers since day 1	2026-07-15 03:58:16 +08:00
canglan	4913984391	feat: poll groups/servers, timed polls, features sort+filter by group	2026-07-14 03:17:13 +08:00
canglan	d61ad2109f	refactor: remove polls+features, move to standalone mc-vote repo	2026-07-14 03:11:26 +08:00
canglan	ee2f33c61f	feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all	2026-07-14 01:17:56 +08:00
canglan	116fe89ac8	feat: poll/voting system with live results and bar charts	2026-07-13 21:37:16 +08:00
canglan	eed4591059	security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy	2026-07-13 19:49:44 +08:00
canglan	532efb962f	fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook	2026-07-13 03:49:02 +08:00
canglan	ea3cd67e02	feat: external API for Java server integration with dedicated key	2026-07-13 01:24:03 +08:00
canglan	aa9ee24118	fix: disable all static file caching to prevent stale assets	2026-07-12 02:08:18 +08:00
canglan	247a4e851d	feat: MC Report System - MySQL + Express + Vanilla JS SPA	2026-07-12 01:23:19 +08:00