cedric d9da213341 fix: warn on default CSRF_SECRET and add SSRF guards

2026-07-27 01:55:04 +04:00

..

lib

handle link without prefix

2025-04-10 09:11:45 +04:00

partials

fix(security): systematic output escaping with e() and video-card partial

2026-07-27 01:54:42 +04:00

config.default.php

fix: warn on default CSRF_SECRET and add SSRF guards

2026-07-27 01:55:04 +04:00

config.local.php.sample

fix(csrf): stateless HMAC token to survive page cache

2026-07-26 18:44:05 +04:00

config.php

fix: load markdown in direct.php, allow video-channels, guard modals

2026-07-27 01:54:34 +04:00

featured-videos.php

feat: hide video count

2025-10-17 12:29:10 +04:00

footer.php

Revert "feat: add decorative emoji row above footer hashtags"

2026-07-25 17:57:54 +04:00

header.php

fix: CSP compliance for inline styles and scripts

2026-07-27 01:54:57 +04:00

hero-section.php

fix(security): systematic output escaping with e() and video-card partial

2026-07-27 01:54:42 +04:00

mobile-menu.php

feat: replace direct element

2025-10-17 12:29:11 +04:00

pwa-init.php

fix: CSP compliance for inline styles and scripts

2026-07-27 01:54:57 +04:00

recent-videos.php

feat: hide video count

2025-10-17 12:29:10 +04:00

security.php

fix(security): systematic output escaping with e() and video-card partial

2026-07-27 01:54:42 +04:00

sidebar.php

feat: replace direct element

2025-10-17 12:29:11 +04:00

simple-cache.php

feat: add last podcast from castopod

2025-10-17 17:38:16 +04:00

structured-data.php

fix(security): safe JSON-LD encoding and URL escaping

2026-07-27 01:54:49 +04:00

wordpress.php

feat: remplace kaubuntu by OKI

2025-10-17 12:29:10 +04:00