canglan d7fb971f9f fix: public footer reads DB settings for all visitors ...

- settings.js: new public GET /settings/public returns only
  copyright + icp (no auth, no sensitive settings leaked)
- app.js loadFooter(): dropped Auth.isAdmin() gate, uses public
  endpoint; showPublic() (home/root) now loads footer too
- security.js: apiKeyGuard whitelist /api/settings/public and
  /api/settings/skin-site

2026-08-22 02:51:20 +08:00

..

auth.js

feat: game UID fully internal + remove multi-identity copy

2026-08-21 21:52:40 +08:00

bans.js

security: backend validation for all inputs

2026-08-21 20:10:05 +08:00

captcha.js

chore: add AGPLv3 copyright header to all source files

2026-08-19 20:27:05 +08:00

export.js

chore: add AGPLv3 copyright header to all source files

2026-08-19 20:27:05 +08:00

external.js

feat: game UID fully internal + remove multi-identity copy

2026-08-21 21:52:40 +08:00

features.js

security: backend validation for all inputs

2026-08-21 20:10:05 +08:00

install.js

feat: game UID fully internal + remove multi-identity copy

2026-08-21 21:52:40 +08:00

logs.js

chore: add AGPLv3 copyright header to all source files

2026-08-19 20:27:05 +08:00

notifications.js

security: backend validation for all inputs

2026-08-21 20:10:05 +08:00

polls.js

feat: ticket create - sub-server selector

2026-08-21 22:02:06 +08:00

settings.js

fix: public footer reads DB settings for all visitors

2026-08-22 02:51:20 +08:00

sources.js

chore: add AGPLv3 copyright header to all source files

2026-08-19 20:27:05 +08:00

tickets.js

feat: ticket create - sub-server selector

2026-08-21 22:02:06 +08:00

uploads.js

chore: add AGPLv3 copyright header to all source files

2026-08-19 20:27:05 +08:00

users.js

feat: game UID fully internal + remove multi-identity copy

2026-08-21 21:52:40 +08:00