Commit Graph

  • c493c1204b feat: registration source selector (netease/skin/java) canglan 2026-07-15 04:34:06 +08:00
  • c892b18d33 fix: CSP script-src-attr:none blocked all onclick handlers since day 1 canglan 2026-07-15 03:58:16 +08:00
  • 021351d898 fix: restore from regex corruption, JS-bind modal close, data-action delegation canglan 2026-07-15 03:53:16 +08:00
  • 80f8342c0b debug: add window.onerror to display JS errors in sidebar canglan 2026-07-15 03:49:50 +08:00
  • 0f64af42a1 feat: password reset + data-action delegation for all onclick canglan 2026-07-15 02:45:33 +08:00
  • f0e891b17c fix: data-action delegation + convert onclick to event listeners, sidebar+logout+modals canglan 2026-07-15 02:44:18 +08:00
  • 9e15a319f5 fix: replace all inline onclick with JS event listeners (sidebar nav + logout) canglan 2026-07-14 05:37:37 +08:00
  • b4df827f0d fix: restore missing window.App=App causing sidebar+logout broken canglan 2026-07-14 04:30:38 +08:00
  • 8c36314253 fix: hide top bar in admin, add polls+features links, logout text canglan 2026-07-14 04:06:45 +08:00
  • 0d26653c85 fix: migrate new tables on every startup, not just fresh install canglan 2026-07-14 04:00:49 +08:00
  • 4d8bc848e1 feat: features as GitHub Issues style with comments/discussion, status filter canglan 2026-07-14 03:25:50 +08:00
  • f277711082 docs: README + optimize auth getSecret, features id fix, token error msg canglan 2026-07-14 03:19:36 +08:00
  • 4913984391 feat: poll groups/servers, timed polls, features sort+filter by group canglan 2026-07-14 03:17:13 +08:00
  • d61ad2109f refactor: remove polls+features, move to standalone mc-vote repo canglan 2026-07-14 03:11:26 +08:00
  • 3d7393817c fix: polls /active route order, features redundant auth check canglan 2026-07-14 03:03:56 +08:00
  • ee2f33c61f feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all canglan 2026-07-14 01:17:56 +08:00
  • 74974864cd fix: no revote, blind result after voting, admin 1.5 vote weight canglan 2026-07-13 22:01:03 +08:00
  • 116fe89ac8 feat: poll/voting system with live results and bar charts canglan 2026-07-13 21:37:16 +08:00
  • eed4591059 security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy canglan 2026-07-13 19:49:44 +08:00
  • bc16833a57 feat: SVG image captcha with noise and color distortion canglan 2026-07-13 18:33:31 +08:00
  • befd51dbd5 fix: prevent username/email enumeration via registration error messages canglan 2026-07-13 18:29:32 +08:00
  • b24f8cd74d fix: critical - external POST parameter count mismatch (11 vs 10) canglan 2026-07-13 18:26:49 +08:00
  • 8d9e154ce1 fix: restrict PUT /tickets to admin's own claims (enforce claim system) canglan 2026-07-13 18:19:28 +08:00
  • 2a18b4b1a8 perf: cache config.json reads by mtime, reduce sync I/O canglan 2026-07-13 04:18:52 +08:00
  • 4f4df7e479 fix: backend+frontend full audit - 15 bugs fixed across all files canglan 2026-07-13 04:07:18 +08:00
  • 532efb962f fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook canglan 2026-07-13 03:49:02 +08:00
  • 7c03fe7635 fix: external register verify token mismatch, add type validation canglan 2026-07-13 03:36:53 +08:00
  • a51e841fc9 refactor: English subcommands, plugin login/track redesign, clean external API routes canglan 2026-07-13 03:35:13 +08:00
  • 2a5c25f41c refactor: unified /report command with login/register/track, external auth endpoints canglan 2026-07-13 03:25:39 +08:00
  • de5a46f392 feat: Paper plugin + external API POST endpoint canglan 2026-07-13 01:28:33 +08:00
  • ea3cd67e02 feat: external API for Java server integration with dedicated key canglan 2026-07-13 01:24:03 +08:00
  • 8ae02dd115 fix: add appealing to active_count, limit check, export processing count canglan 2026-07-12 23:28:52 +08:00
  • 728a4c46f1 fix: keep top bar visible in admin mode too canglan 2026-07-12 21:57:45 +08:00
  • 6f66b854b3 fix: add logout text label in top bar canglan 2026-07-12 21:57:22 +08:00
  • 650a65e347 fix: hide top bar in admin mode, sidebar is the primary nav canglan 2026-07-12 21:28:20 +08:00
  • 83398d1fab feat: quick nav buttons in top bar when logged in canglan 2026-07-12 21:24:49 +08:00
  • a9d85b2d07 fix: top bar shows username+logout when logged in, not blank canglan 2026-07-12 21:23:16 +08:00
  • 531d2a6e26 fix: expose all page objects to window for inline onclick handlers canglan 2026-07-12 21:16:05 +08:00
  • 6fa1a65843 fix: admin cant view admin_complaint/result_appeal via URL, appeal close also closes parent canglan 2026-07-12 21:02:21 +08:00
  • f87411b3b4 feat: auto-close resolved/rejected after 7 days, closed only owner can modify canglan 2026-07-12 18:15:10 +08:00
  • 33078855cb feat: appealing status, auto-close parent on appeal resolved, closed=final canglan 2026-07-12 17:42:42 +08:00
  • bcaeb78469 fix: unclaimed page show reason for result_appeal type canglan 2026-07-12 17:35:47 +08:00
  • 0fd004dd84 fix: result_appeal also uses appeal display logic in ticket detail canglan 2026-07-12 17:35:23 +08:00
  • 93382773e6 fix: add result_appeal badge CSS and export label canglan 2026-07-12 17:34:58 +08:00
  • 7bd23b6bcf fix: result_appeal had wrong respContent label canglan 2026-07-12 17:34:02 +08:00
  • 10b6ff94ed feat: admin complaint (owner only) + result appeal (one per ticket, owner only) canglan 2026-07-12 15:19:09 +08:00
  • 6657c05dec fix: add escJs for JS string escaping in onclick attributes, apply to users/templates/notifications canglan 2026-07-12 13:09:52 +08:00
  • da5aa09421 fix: escape single quotes in U.esc to prevent onclick attribute injection canglan 2026-07-12 13:09:10 +08:00
  • ea7a3c42be fix: escape notification name/url in edit modal to prevent HTML injection canglan 2026-07-12 13:08:45 +08:00
  • 34e821ff1d fix: canClaim logic - must be unassigned AND pending, not OR canglan 2026-07-12 13:07:31 +08:00
  • c69ad2c36e fix: show appeal reason in ticket detail, correct description labels canglan 2026-07-12 13:07:09 +08:00
  • 4e66db0406 fix: dashboard uses Auth.isOwner for export endpoint, admin was getting 403 canglan 2026-07-12 13:06:36 +08:00
  • 29356bd530 fix: prevent $ interpolation in renderTemplate replacement canglan 2026-07-12 13:04:58 +08:00
  • de1bca9d8a fix: client-side file size limit 20→50MB to match server canglan 2026-07-12 13:03:46 +08:00
  • 3ec9e80e0d fix: remove fragile setTimeout in confirm, bind handlers directly canglan 2026-07-12 13:03:02 +08:00
  • 62eeb61a71 fix: remove redundant min-height:100vh causing extra scrollbars in flex layout canglan 2026-07-12 13:01:43 +08:00
  • 82c2671149 fix: loadFooter only for admin, only once per session canglan 2026-07-12 04:21:26 +08:00
  • 5dd0db76be fix: add UNIQUE on email, check dup email in profile update, generic error messages in auth route canglan 2026-07-12 04:20:56 +08:00
  • f2fec8e609 fix: loadFooter after login, escape user-info, error handling on render canglan 2026-07-12 03:16:02 +08:00
  • 58df6c5268 fix: flexbox body layout for proper sticky footer, no scrollbar on public pages canglan 2026-07-12 02:44:32 +08:00
  • 50f3cace51 fix: move install check to init once, route() sync for instant nav, hide top-bar in admin canglan 2026-07-12 02:40:08 +08:00
  • 7699bd0598 fix: keep top bar visible, raise sidebar z-index to 210 to prevent overlap canglan 2026-07-12 02:20:54 +08:00
  • 9241dd6a6f fix: add appeal button, hide top bar when logged in so sidebar is clickable canglan 2026-07-12 02:14:25 +08:00
  • aa9ee24118 fix: disable all static file caching to prevent stale assets canglan 2026-07-12 02:08:18 +08:00
  • f09a554ea3 fix: make LoginPage.render async to unify async render contract canglan 2026-07-12 02:04:10 +08:00
  • 989a3ae4cf feat: home page hash-based tab routing for shareable links canglan 2026-07-12 01:53:59 +08:00
  • 5bb2df7b52 fix: login broken by sync/async mismatch, register missing home link, top bar contrast canglan 2026-07-12 01:50:17 +08:00
  • a4cee1c186 style: modern UI redesign - gradients, glassmorphism, animations, Inter font canglan 2026-07-12 01:39:09 +08:00
  • a6058bf207 feat: top bar, footer, login/register buttons, ICP/copyright settings canglan 2026-07-12 01:32:18 +08:00
  • e44ee885ca fix: add missing unclaimed.js and notifications.js script tags to index.html canglan 2026-07-12 01:25:59 +08:00
  • e654339611 chore: remove stale files from v2 canglan 2026-07-12 01:23:35 +08:00
  • 247a4e851d feat: MC Report System - MySQL + Express + Vanilla JS SPA canglan 2026-07-12 01:23:19 +08:00