lichenblankie/tinyweb
2
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity Actions
No description
15 commits 2 branches 0 tags 10 MiB
Find a file
lichenblankie d101901361 Harden security: bookmark auth, CSP headers, per-session CSRF, and more 
- Bookmark endpoint now requires a secret token (stored in settings)
- Style reset moved from GET to POST with CSRF protection
- Open redirect prevention in _redirect() helper
- Import capped at 100 URLs to prevent abuse
- page_tags cleaned up on delete + PRAGMA foreign_keys enabled
- CSP, X-Frame-Options, X-Content-Type-Options on all responses
- CSRF tokens now per-session via double-submit cookie pattern
- Tag names URL-decoded for special characters
- Gateway forwards cookies in request data

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-06-05 05:06:10 +00:00
themes Add themes folder with kodama template and gitignore index.db 2026-06-05 05:06:10 +00:00
.gitignore Add themes folder with kodama template and gitignore index.db 2026-06-05 05:06:10 +00:00
app.py Bind HTTP server to 0.0.0.0 for remote access 2026-06-05 05:06:10 +00:00
CLAUDE.md Add CLAUDE.md with project architecture and conventions 2026-06-05 05:06:10 +00:00
db.py Harden security: bookmark auth, CSP headers, per-session CSRF, and more 2026-06-05 05:06:10 +00:00
gateway.py Harden security: bookmark auth, CSP headers, per-session CSRF, and more 2026-06-05 05:06:10 +00:00
handlers.py Harden security: bookmark auth, CSP headers, per-session CSRF, and more 2026-06-05 05:06:10 +00:00
README.md first commit 2026-06-05 05:06:10 +00:00
requirements.txt Migrate TinyWeb to Reticulum mesh network 2026-06-05 05:06:10 +00:00
rns_client.py Add Reticulum-native subscriptions and sync-based distributed search 2026-06-05 05:06:10 +00:00
templates.py Add custom HTML template editor and clean up UI 2026-06-05 05:06:10 +00:00

README.md