No description
- Bookmark endpoint now requires a secret token (stored in settings) - Style reset moved from GET to POST with CSRF protection - Open redirect prevention in _redirect() helper - Import capped at 100 URLs to prevent abuse - page_tags cleaned up on delete + PRAGMA foreign_keys enabled - CSP, X-Frame-Options, X-Content-Type-Options on all responses - CSRF tokens now per-session via double-submit cookie pattern - Tag names URL-decoded for special characters - Gateway forwards cookies in request data |
||
|---|---|---|
| themes | ||
| .gitignore | ||
| app.py | ||
| db.py | ||
| gateway.py | ||
| handlers.py | ||
| README.md | ||
| requirements.txt | ||
| rns_client.py | ||
| templates.py | ||