8 Commits

Include renames

Author	SHA1	Message	Date
cedric	a28ba8bfec	fix(security): systematic output escaping with e() and video-card partial	2026-07-27 01:54:42 +04:00
cedric	5899dfb856	fix(csrf): stateless HMAC token to survive page cache	2026-07-26 18:44:05 +04:00
cedric	0d45b716fb	fix: view more button on category page	2026-07-26 18:19:53 +04:00
cedric	62d4d99bfb	fix: remove COEP header to allow cross-origin embeds	2026-07-08 07:39:09 +04:00
cedric	3e249bbc34	feat: improve security headers and csp nonce handling	2026-07-08 07:33:40 +04:00
cedric	006194fcdb	fix: add security exception to allow S3 media	2025-09-29 18:58:14 +04:00
cedric	0a3604daad	feat: authorize Plausible script	2025-07-24 08:36:46 +04:00
cedric	bbe807160e	add security functions and HTTP headers	2025-07-17 09:57:47 +04:00