291 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
cedric	d9da213341	fix: warn on default CSRF_SECRET and add SSRF guards	2026-07-27 01:55:04 +04:00
cedric	df55445480	fix: CSP compliance for inline styles and scripts	2026-07-27 01:54:57 +04:00
cedric	4778f0e9e3	fix(security): safe JSON-LD encoding and URL escaping	2026-07-27 01:54:49 +04:00
cedric	a28ba8bfec	fix(security): systematic output escaping with e() and video-card partial	2026-07-27 01:54:42 +04:00
cedric	442c262539	fix: load markdown in direct.php, allow video-channels, guard modals	2026-07-27 01:54:34 +04:00
cedric	9b460a2550	ci: add PHP and JS unit tests to workflows	2026-07-26 22:52:46 +04:00
cedric	f895800c9d	chore: wire tests into check.sh and document test suites	2026-07-26 20:22:29 +04:00
cedric	606175d718	test(e2e): add Playwright tests for homepage, video page and load-more	2026-07-26 20:22:20 +04:00
cedric	54a4368ea8	test(js): add node:test unit tests for countdown and pleroma adapter	2026-07-26 20:22:12 +04:00
cedric	c02180fb4d	test(php): add native unit tests for security, cache, format, markdown	2026-07-26 20:22:05 +04:00
cedric	5c726f91b2	fix(server): exclude /ajax/ from .php redirect to preserve POST	2026-07-26 19:55:18 +04:00
cedric	98c2818c3f	fix: change cache name	2026-07-26 19:47:15 +04:00
cedric	6c432c517f	fix: call load-more endpoint without .php extension	2026-07-26 19:46:16 +04:00
cedric	090663dc3b	fix: change cache name	2026-07-26 18:51:32 +04:00
cedric	5899dfb856	fix(csrf): stateless HMAC token to survive page cache	2026-07-26 18:44:05 +04:00
cedric	9109068b0b	chore(sw): bump cache version to 26072026-1831	2026-07-26 18:31:36 +04:00
cedric	0d45b716fb	fix: view more button on category page	2026-07-26 18:19:53 +04:00
cedric	b12d66195d	docs(readme): align CI checks description with workflows	2026-07-26 12:22:31 +04:00
cedric	050d583b6b	ci: keep only PHP/JS lint in CI, move rest to local checks	2026-07-25 22:33:01 +04:00
cedric	bc64981023	docs(deploy): clarify CI SSH key transfer to server	2026-07-25 22:01:10 +04:00
cedric	3620010212	feat: add ko-fi link	2026-07-25 21:52:29 +04:00
cedric	aa86bf65e4	feat(donations): clickable OKI links in donation disclaimer	2026-07-25 21:52:29 +04:00
cedric	e673b484ce	feat(donations): default OKI links and transparency notice	2026-07-25 21:35:33 +04:00
cedric	5457f6fae0	style: feature trending hashtags card with accent bar and icon	2026-07-25 18:45:11 +04:00
cedric	33646f8d19	fix: make search results count visible in dark mode	2026-07-25 18:09:07 +04:00
cedric	acd3a44c55	feat: add decorative emoji row above trending hashtags	2026-07-25 17:59:39 +04:00
cedric	609677f679	Revert "feat: add decorative emoji row above footer hashtags" ... This reverts commit e5c7db1355.	2026-07-25 17:57:54 +04:00
cedric	e5c7db1355	feat: add decorative emoji row above footer hashtags	2026-07-25 17:56:16 +04:00
cedric	f04b3f5e64	docs: add git permission and 502 troubleshooting to deploy guide	2026-07-25 17:42:17 +04:00
cedric	9eddf5d9cd	fix: prevent infinite redirect loop in nginx php block	2026-07-25 17:42:12 +04:00
cedric	9449f7e149	fix: restructure nginx sample for pre-certbot deployment	2026-07-25 17:31:53 +04:00
cedric	dc217e77f1	fix: add fix for deploying	2026-07-25 17:05:05 +04:00
cedric	4a4b56296e	feat: accept any .adoc file in PDF generation script	2026-07-25 16:51:05 +04:00
cedric	84013376f2	docs: prioritize nginx, fix sample config and use certbot snap	2026-07-25 16:44:24 +04:00
cedric	dafb5e5753	fix: architecture schema in DEPLOY	2026-07-25 16:33:37 +04:00
cedric	4114b9e8e3	feat: limit default categories and hashtags to podcast scope	2026-07-25 15:19:36 +04:00
cedric	521ad8c7f1	feat: improve SEO with podcast JSON-LD, canonical and meta descriptions	2026-07-25 15:12:43 +04:00
cedric	576a72a0e1	fix: enable cache by default and skip caching empty castopod results	2026-07-24 20:55:35 +04:00
cedric	9cf7487f24	fix: shellcheck SC2164 in scripts/check.sh	2026-07-24 20:31:35 +04:00
cedric	681683c059	feat: add Gitea Actions CI/CD, local checks and deploy guide	2026-07-24 20:19:02 +04:00
cedric	7e8f078b60	docs: use generic example.com domain in samples and docs	2026-07-24 19:54:00 +04:00
cedric	7f1bdaa2ab	feat: add styled PWA update modal with auto cache purge	2026-07-24 19:35:13 +04:00
cedric	f760dfb72c	feat: apply ANNU KUTE CED branding to icons and favicons	2026-07-23 22:09:40 +04:00
cedric	4e180c0248	config: default HERO_TYPE = video	2026-07-23 06:56:36 +04:00
cedric	cc6580ccbb	config: change default HERO_VIDEO_ID	2026-07-23 06:56:06 +04:00
cedric	5b1a78782a	docs: add one-command README HTML/PDF export	2026-07-23 05:48:43 +04:00
cedric	3d28d3832f	docs: rewrite README as bilingual FR/EN reference	2026-07-23 05:10:04 +04:00
cedric	eaacd23702	docs: rebrand fork for ANNU KUTE CED podcast hub	2026-07-23 04:17:49 +04:00
cedric	62d4d99bfb	fix: remove COEP header to allow cross-origin embeds	2026-07-08 07:39:09 +04:00
cedric	3e249bbc34	feat: improve security headers and csp nonce handling	2026-07-08 07:33:40 +04:00