Pontoporeia 0062b29678 Fix security issues from audit: gate partage fragments on share_active session, add CSRF to retry-email POST, remove dead App::verifyCsrf()

2026-06-24 14:17:24 +02:00

..

admin

Fix open redirect in tag.php + language.php: reject protocol-relative URLs (//evil.com) by also checking for // prefix

2026-06-24 14:15:25 +02:00

assets

Fix biome lint errors: remove duplicate CSS properties, apply safe auto-fixes

2026-06-24 13:57:00 +02:00

partage

Fix security issues from audit: gate partage fragments on share_active session, add CSRF to retry-email POST, remove dead App::verifyCsrf()

2026-06-24 14:17:24 +02:00

.htaccess

fix: scoped HTMX file validation, add validation to TFE/PeerTube inputs

2026-05-19 00:08:05 +02:00

.user.ini

fix: increase PHP upload limits to support large video files

2026-06-15 16:26:48 +02:00

index.php

feat: single entry point routing — convert to front controller pattern

2026-04-20 12:42:15 +02:00

live-reload.php

rename posterg → xamxam throughout: nginx conf, scripts, PHP source, docs

2026-05-05 11:04:52 +02:00

maintenance.php

maintenance: allow /partage through gate, fix fragment routing, add visibility table in admin

2026-05-19 00:08:06 +02:00

request-access.php

fix: obfuscate email in contact links, raise rate limits, make Libre toggleable

2026-05-19 00:08:06 +02:00

validate-access.php

Implement TFE file access restriction feature (complete)

2026-04-27 20:20:52 +02:00