 Florian Sylvain
|
ea98c5ec05
|
fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)
|
2026-10-22 00:49:19 +02:00 |
|
 fsylvain
|
834493a4f5
|
feat: signed releases, release feed, notification (read-only)
|
2026-10-01 15:01:53 +02:00 |
|
|
fsylvain
|
cbb403011a
|
fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)
|
2026-09-25 05:33:02 +02:00 |
|