Théophile Gervreau-Mercier
|
f5d3281c43
|
security: fix all LOW priority items from TODO.SECURITY.md
Item 13 — Remove deprecated X-XSS-Protection header
- nginx/posterg.conf: header removed (was '1; mode=block')
- nginx/SECURITY_HEADERS.md: new file documenting header decisions
and explaining why X-XSS-Protection is counterproductive
Item 14 — Add rel="noreferrer" to external target="_blank" link
- public/admin/thanks.php: rel="noopener" → rel="noopener noreferrer"
Item 15 — Explicit (int) casts on all integer HTML outputs
- public/index.php: (int) on item id, page numbers
- public/search.php: (int) on totalItems, year options, item id, pagination
Item 16 — Remove unused DATABASE_PATH constant
- config/bootstrap.php: define('DATABASE_PATH', ...) removed
docs/TODO.SECURITY.md updated: items 13-16 marked resolved and
moved to the ✅ Resolved section.
|
2026-02-08 13:54:02 +01:00 |
|
Théophile Gervreau-Mercier
|
94d110438f
|
docs: rewrite admin panel README
|
2026-02-08 11:58:48 +01:00 |
|
Théophile Gervreau-Mercier
|
df611b0333
|
admin: unify templates, dynamic navigation, and PHP cleanup
|
2026-02-08 11:58:43 +01:00 |
|
Théophile Gervreau-Mercier
|
52decc3e5f
|
admin css: expand stylesheet with reusable component classes
|
2026-02-08 11:58:38 +01:00 |
|
Théophile Gervreau-Mercier
|
87f0838b5d
|
dev: add live-reload development server
|
2026-02-08 11:58:35 +01:00 |
|
Théophile Gervreau-Mercier
|
52f8e267e5
|
admin: restructure action scripts to actions/ subdirectory
|
2026-02-08 11:58:33 +01:00 |
|
Théophile Gervreau-Mercier
|
f7132ecb7d
|
CSS fixup
|
2026-02-06 14:29:09 +01:00 |
|
Théophile Gervreau-Mercier
|
4bbbc58e24
|
Fix admin CSS not loading and quirks mode issues
Fixed multiple issues in admin panel:
1. CSS path: modern-normalize.css → modern-normalize.min.css
(File is actually named .min.css)
2. Icon path: assets/icon.svg → /assets/admin_favicon.svg
(Was relative, now absolute; correct filename)
3. Navigation: /admin/list.php → /admin/
(list.php was renamed to index.php)
4. Short PHP tags: <? → <?php
(Better compatibility, some servers don't enable short_open_tag)
5. Quirks mode warning was due to CSS not loading, not DOCTYPE
(DOCTYPE was already present)
Files modified:
- public/admin/inc/head.php (main fixes)
- public/admin/index.php (short tags)
- public/admin/add.php (short tags)
- public/admin/import.php (short tags)
Need to redeploy for production: just deploy
|
2026-02-06 13:26:24 +01:00 |
|