canglan
6e9101a506
fix: deploy crash + multiple bug fixes + cleanup
- server.js: fix getSiteName() returning string when not installed causing
'getSiteName(...).then is not a function' crash on homepage (deploy blocker)
- server.js: auto-load business routes after install completes (no restart needed),
HTML cache keyed by api_key
- install: validate db name/email/password, trigger route loading after complete
- app.js: fix forgot/reset/verify pages rendering HomePage (missing page mapping)
- verify.js: support URL token auto-verification for external registration links
- auth: new email_code template for 6-digit code, reset_password template
(forgot-password was using verify_email template)
- upload.js: fix MP4 magic-bytes check using undefined buf variable
- tickets.js: status enum validation, anonymous submission rate limit
- security.js: XSS whitelist preserves email template HTML, strips scripts,
blocks javascript:/data: hrefs; CORS reject returns 403
- bans.js: allow clearing reason/duration, status enum validation
- users.js: fix req.user.role ReferenceError in create user modal
- home.js: tracking results now have detail view button
- .gitignore: ignore data/ (db credentials), logs, session files, temp scripts
2026-08-16 21:21:25 +08:00
..
2026-07-18 01:53:24 +08:00
2026-07-19 00:40:54 +08:00
2026-07-15 03:53:16 +08:00
2026-07-16 23:50:16 +08:00
2026-07-16 23:50:16 +08:00
2026-07-15 02:45:33 +08:00
2026-08-16 21:21:25 +08:00
2026-08-16 21:21:25 +08:00
2026-07-15 03:53:16 +08:00
2026-07-16 23:51:09 +08:00
2026-07-15 03:53:16 +08:00
2026-07-17 15:05:01 +08:00
2026-07-16 22:00:23 +08:00
2026-07-16 23:04:15 +08:00
2026-07-15 03:53:16 +08:00
2026-07-17 13:41:29 +08:00
2026-07-15 03:53:16 +08:00
2026-07-17 21:55:15 +08:00
2026-07-15 03:53:16 +08:00
2026-07-15 03:53:16 +08:00
2026-08-16 21:21:25 +08:00
2026-08-16 21:21:25 +08:00