canglan c892b18d33 fix: CSP script-src-attr:none blocked all onclick handlers since day 1

2026-07-15 03:58:16 +08:00

..

middleware

docs: README + optimize auth getSecret, features id fix, token error msg

2026-07-14 03:19:36 +08:00

routes

feat: password reset + data-action delegation for all onclick

2026-07-15 02:45:33 +08:00

db.js

fix: migrate new tables on every startup, not just fresh install

2026-07-14 04:00:49 +08:00

mailer.js

fix: HIGH+MEDIUM bugs from full audit - listen error, JWT, upload, mailer, webhook

2026-07-13 03:49:02 +08:00

server.js

fix: CSP script-src-attr:none blocked all onclick handlers since day 1

2026-07-15 03:58:16 +08:00

webhook.js

security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy

2026-07-13 19:49:44 +08:00