-
c493c1204b
feat: registration source selector (netease/skin/java)
canglan
2026-07-15 04:34:06 +08:00
-
c892b18d33
fix: CSP script-src-attr:none blocked all onclick handlers since day 1
canglan
2026-07-15 03:58:16 +08:00
-
021351d898
fix: restore from regex corruption, JS-bind modal close, data-action delegation
canglan
2026-07-15 03:53:16 +08:00
-
80f8342c0b
debug: add window.onerror to display JS errors in sidebar
canglan
2026-07-15 03:49:50 +08:00
-
0f64af42a1
feat: password reset + data-action delegation for all onclick
canglan
2026-07-15 02:45:33 +08:00
-
f0e891b17c
fix: data-action delegation + convert onclick to event listeners, sidebar+logout+modals
canglan
2026-07-15 02:44:18 +08:00
-
9e15a319f5
fix: replace all inline onclick with JS event listeners (sidebar nav + logout)
canglan
2026-07-14 05:37:37 +08:00
-
b4df827f0d
fix: restore missing window.App=App causing sidebar+logout broken
canglan
2026-07-14 04:30:38 +08:00
-
8c36314253
fix: hide top bar in admin, add polls+features links, logout text
canglan
2026-07-14 04:06:45 +08:00
-
0d26653c85
fix: migrate new tables on every startup, not just fresh install
canglan
2026-07-14 04:00:49 +08:00
-
4d8bc848e1
feat: features as GitHub Issues style with comments/discussion, status filter
canglan
2026-07-14 03:25:50 +08:00
-
f277711082
docs: README + optimize auth getSecret, features id fix, token error msg
canglan
2026-07-14 03:19:36 +08:00
-
4913984391
feat: poll groups/servers, timed polls, features sort+filter by group
canglan
2026-07-14 03:17:13 +08:00
-
d61ad2109f
refactor: remove polls+features, move to standalone mc-vote repo
canglan
2026-07-14 03:11:26 +08:00
-
3d7393817c
fix: polls /active route order, features redundant auth check
canglan
2026-07-14 03:03:56 +08:00
-
ee2f33c61f
feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all
canglan
2026-07-14 01:17:56 +08:00
-
74974864cd
fix: no revote, blind result after voting, admin 1.5 vote weight
canglan
2026-07-13 22:01:03 +08:00
-
116fe89ac8
feat: poll/voting system with live results and bar charts
canglan
2026-07-13 21:37:16 +08:00
-
eed4591059
security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy
canglan
2026-07-13 19:49:44 +08:00
-
bc16833a57
feat: SVG image captcha with noise and color distortion
canglan
2026-07-13 18:33:31 +08:00
-
befd51dbd5
fix: prevent username/email enumeration via registration error messages
canglan
2026-07-13 18:29:32 +08:00
-
b24f8cd74d
fix: critical - external POST parameter count mismatch (11 vs 10)
canglan
2026-07-13 18:26:49 +08:00
-
8d9e154ce1
fix: restrict PUT /tickets to admin's own claims (enforce claim system)
canglan
2026-07-13 18:19:28 +08:00
-
2a18b4b1a8
perf: cache config.json reads by mtime, reduce sync I/O
canglan
2026-07-13 04:18:52 +08:00
-
4f4df7e479
fix: backend+frontend full audit - 15 bugs fixed across all files
canglan
2026-07-13 04:07:18 +08:00
-
532efb962f
fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook
canglan
2026-07-13 03:49:02 +08:00
-
7c03fe7635
fix: external register verify token mismatch, add type validation
canglan
2026-07-13 03:36:53 +08:00
-
a51e841fc9
refactor: English subcommands, plugin login/track redesign, clean external API routes
canglan
2026-07-13 03:35:13 +08:00
-
2a5c25f41c
refactor: unified /report command with login/register/track, external auth endpoints
canglan
2026-07-13 03:25:39 +08:00
-
de5a46f392
feat: Paper plugin + external API POST endpoint
canglan
2026-07-13 01:28:33 +08:00
-
ea3cd67e02
feat: external API for Java server integration with dedicated key
canglan
2026-07-13 01:24:03 +08:00
-
8ae02dd115
fix: add appealing to active_count, limit check, export processing count
canglan
2026-07-12 23:28:52 +08:00
-
728a4c46f1
fix: keep top bar visible in admin mode too
canglan
2026-07-12 21:57:45 +08:00
-
6f66b854b3
fix: add logout text label in top bar
canglan
2026-07-12 21:57:22 +08:00
-
650a65e347
fix: hide top bar in admin mode, sidebar is the primary nav
canglan
2026-07-12 21:28:20 +08:00
-
83398d1fab
feat: quick nav buttons in top bar when logged in
canglan
2026-07-12 21:24:49 +08:00
-
a9d85b2d07
fix: top bar shows username+logout when logged in, not blank
canglan
2026-07-12 21:23:16 +08:00
-
531d2a6e26
fix: expose all page objects to window for inline onclick handlers
canglan
2026-07-12 21:16:05 +08:00
-
6fa1a65843
fix: admin cant view admin_complaint/result_appeal via URL, appeal close also closes parent
canglan
2026-07-12 21:02:21 +08:00
-
f87411b3b4
feat: auto-close resolved/rejected after 7 days, closed only owner can modify
canglan
2026-07-12 18:15:10 +08:00
-
33078855cb
feat: appealing status, auto-close parent on appeal resolved, closed=final
canglan
2026-07-12 17:42:42 +08:00
-
bcaeb78469
fix: unclaimed page show reason for result_appeal type
canglan
2026-07-12 17:35:47 +08:00
-
0fd004dd84
fix: result_appeal also uses appeal display logic in ticket detail
canglan
2026-07-12 17:35:23 +08:00
-
93382773e6
fix: add result_appeal badge CSS and export label
canglan
2026-07-12 17:34:58 +08:00
-
7bd23b6bcf
fix: result_appeal had wrong respContent label
canglan
2026-07-12 17:34:02 +08:00
-
10b6ff94ed
feat: admin complaint (owner only) + result appeal (one per ticket, owner only)
canglan
2026-07-12 15:19:09 +08:00
-
6657c05dec
fix: add escJs for JS string escaping in onclick attributes, apply to users/templates/notifications
canglan
2026-07-12 13:09:52 +08:00
-
da5aa09421
fix: escape single quotes in U.esc to prevent onclick attribute injection
canglan
2026-07-12 13:09:10 +08:00
-
ea7a3c42be
fix: escape notification name/url in edit modal to prevent HTML injection
canglan
2026-07-12 13:08:45 +08:00
-
34e821ff1d
fix: canClaim logic - must be unassigned AND pending, not OR
canglan
2026-07-12 13:07:31 +08:00
-
c69ad2c36e
fix: show appeal reason in ticket detail, correct description labels
canglan
2026-07-12 13:07:09 +08:00
-
4e66db0406
fix: dashboard uses Auth.isOwner for export endpoint, admin was getting 403
canglan
2026-07-12 13:06:36 +08:00
-
29356bd530
fix: prevent $ interpolation in renderTemplate replacement
canglan
2026-07-12 13:04:58 +08:00
-
de1bca9d8a
fix: client-side file size limit 20→50MB to match server
canglan
2026-07-12 13:03:46 +08:00
-
3ec9e80e0d
fix: remove fragile setTimeout in confirm, bind handlers directly
canglan
2026-07-12 13:03:02 +08:00
-
62eeb61a71
fix: remove redundant min-height:100vh causing extra scrollbars in flex layout
canglan
2026-07-12 13:01:43 +08:00
-
82c2671149
fix: loadFooter only for admin, only once per session
canglan
2026-07-12 04:21:26 +08:00
-
5dd0db76be
fix: add UNIQUE on email, check dup email in profile update, generic error messages in auth route
canglan
2026-07-12 04:20:56 +08:00
-
f2fec8e609
fix: loadFooter after login, escape user-info, error handling on render
canglan
2026-07-12 03:16:02 +08:00
-
58df6c5268
fix: flexbox body layout for proper sticky footer, no scrollbar on public pages
canglan
2026-07-12 02:44:32 +08:00
-
50f3cace51
fix: move install check to init once, route() sync for instant nav, hide top-bar in admin
canglan
2026-07-12 02:40:08 +08:00
-
7699bd0598
fix: keep top bar visible, raise sidebar z-index to 210 to prevent overlap
canglan
2026-07-12 02:20:54 +08:00
-
9241dd6a6f
fix: add appeal button, hide top bar when logged in so sidebar is clickable
canglan
2026-07-12 02:14:25 +08:00
-
aa9ee24118
fix: disable all static file caching to prevent stale assets
canglan
2026-07-12 02:08:18 +08:00
-
f09a554ea3
fix: make LoginPage.render async to unify async render contract
canglan
2026-07-12 02:04:10 +08:00
-
989a3ae4cf
feat: home page hash-based tab routing for shareable links
canglan
2026-07-12 01:53:59 +08:00
-
5bb2df7b52
fix: login broken by sync/async mismatch, register missing home link, top bar contrast
canglan
2026-07-12 01:50:17 +08:00
-
a4cee1c186
style: modern UI redesign - gradients, glassmorphism, animations, Inter font
canglan
2026-07-12 01:39:09 +08:00
-
a6058bf207
feat: top bar, footer, login/register buttons, ICP/copyright settings
canglan
2026-07-12 01:32:18 +08:00
-
e44ee885ca
fix: add missing unclaimed.js and notifications.js script tags to index.html
canglan
2026-07-12 01:25:59 +08:00
-
e654339611
chore: remove stale files from v2
canglan
2026-07-12 01:23:35 +08:00
-
247a4e851d
feat: MC Report System - MySQL + Express + Vanilla JS SPA
canglan
2026-07-12 01:23:19 +08:00