Florian Sylvain ea98c5ec05 fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

..

apiKey.go

refac: removed 7 direct and 12 indirect go modules for custom code instead

2026-10-21 23:13:46 +02:00

auditContext.go

feat: activity log backend foundation

2026-10-06 20:35:03 +02:00

auth.go

feat: media duplicate purge, part 1 of 3: persisted purge settings and the purge API

2026-10-05 18:24:03 +02:00

cors.go

refac: removed 7 direct and 12 indirect go modules for custom code instead

2026-10-21 23:13:46 +02:00

crossOrigin.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

rateLimit.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

requireSignedIn.go

refac: removed 7 direct and 12 indirect go modules for custom code instead

2026-10-21 23:13:46 +02:00

securityHeaders.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

trustedProxyRealIP.go

fix: rate limiting X-Real-IP from the real peer

2026-09-25 06:49:55 +02:00