TODO

Completed

Fix share link slug regex mismatch (base64 chars vs base32 pattern)
Fix regex delimiter clash (/ inside [...] broke the pattern) → switched to # delimiter
Add PHP dev server router for /partage/ URL rewriting
Add nginx location block for /partage/ pretty URLs
Fix POST path missing App::boot() (session not started before submission handler)
Fix rate limiter: was instantiating RateLimit then ignoring it, reimplementing inline; added checkKey() to RateLimit and use it