funman300 d60dc18add fix(server): add CSP/security headers middleware, gitignore jks.bak* ...

Content-Security-Policy, X-Content-Type-Options, and X-Frame-Options are
now injected by a single Axum middleware on the web router subtree, so
all HTML pages get consistent headers without touching each file.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-13 19:41:50 -07:00

..

migrations

feat(auth): refresh token rotation via jti tracking

2026-05-12 13:34:42 -07:00

src

fix(server): add CSP/security headers middleware, gitignore jks.bak*

2026-05-13 19:41:50 -07:00

tests

feat(server): add --reset-password admin subcommand

2026-05-12 14:10:13 -07:00

web

fix(server): XSS, missing score submission, leaderboard never updated, no LIMIT

2026-05-13 19:32:14 -07:00

.env.example

feat(sync): re-auth prompt on expired session + server deployment artifacts

2026-05-12 12:45:08 -07:00

Cargo.toml

feat(server): web replay viewer (HTML/CSS + WASM bindings)

2026-05-05 18:54:01 +00:00

docker-compose.yml

feat(sync): re-auth prompt on expired session + server deployment artifacts

2026-05-12 12:45:08 -07:00

Dockerfile

fix(docker): add libsqlite3-0 to runtime image to fix SQLite CANTOPEN error

2026-05-13 15:32:09 -07:00