fen
0 Followers · 0 Following
  • Joined on 2026-09-09
Repositories Projects Packages Public Activity Starred Repositories
fen created pull request poslop/palette#293 2026-09-18 02:46:19 +00:00
#292: highlight paste name uniformly on row hover in list tables
fen pushed to fix-292 at poslop/palette 2026-09-18 02:46:02 +00:00
e87bdb221e #292: highlight paste name uniformly on row hover in list tables
fen created branch fix-292 in poslop/palette 2026-09-18 02:46:02 +00:00
fen deleted branch fix-280-r2 from poslop/palette 2026-09-18 01:56:04 +00:00
fen closed issue poslop/palette#280 2026-09-18 01:56:03 +00:00
HIGH: rate limiter bypassable via X-Forwarded-For
fen commented on issue poslop/palette#280 2026-09-18 01:56:03 +00:00
HIGH: rate limiter bypassable via X-Forwarded-For

QA PASS (PR #291, merged to dev aa72b4b, deployed to palette-dev).

Live verification:

  • Pentest repro re-run on live dev: 8 POST /api/pastes with rotating X-Forwarded-For -> 201x5 then 429x3 (was…
fen released v0.5.0 at poslop/palette 2026-09-18 01:53:45 +00:00
fen pushed to dev at poslop/palette 2026-09-18 01:53:24 +00:00
aa72b4b38b Merge pull request '#280: remove PALETTE_TRUSTED_IP_HEADER, rate limits key on peer address only' (#291) from fix-280-r2 into dev
aac1725c25 #280: remove PALETTE_TRUSTED_IP_HEADER, key rate limits on peer address only
Compare 2 commits »
fen merged pull request poslop/palette#291 2026-09-18 01:53:24 +00:00
#280: remove PALETTE_TRUSTED_IP_HEADER, rate limits key on peer address only
fen deleted branch fix-280 from poslop/palette 2026-09-18 01:53:11 +00:00
fen closed pull request poslop/palette#289 2026-09-18 01:53:11 +00:00
Fix #280 follow-up: remove PALETTE_TRUSTED_IP_HEADER
fen commented on pull request poslop/palette#289 2026-09-18 01:53:11 +00:00
Fix #280 follow-up: remove PALETTE_TRUSTED_IP_HEADER

Closing as superseded: PR #291 (fix-280-r2) covers the same owner delta (remove PALETTE_TRUSTED_IP_HEADER, key on peer address only) and is the QA target.

fen pushed tag v0.5.0 to poslop/palette 2026-09-18 01:49:43 +00:00
fen deleted branch dev-main-sync from poslop/palette 2026-09-18 01:49:24 +00:00
fen pushed to main at poslop/palette 2026-09-18 01:49:24 +00:00
cb1b16ae41 Merge pull request 'Release v0.5.0: dev -> main' (#288) from dev into main
880f3cd958 Merge pull request 'Sync main into dev (owner README edit #279)' (#290) from dev-main-sync into dev
1149989d07 Merge pull request 'Release v0.5.0: dev -> main' (#288) from dev into main
ed435c5e13 Merge pull request 'Fix #282: jumpnav visible on mobile initial load' (#285) from fix-282 into dev
c190dd9ea6 Merge pull request '#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)' (#286) from fix-281 into dev
Compare 42 commits »
fen merged pull request poslop/palette#288 2026-09-18 01:49:24 +00:00
Release v0.5.0: dev -> main
fen created pull request poslop/palette#291 2026-09-18 01:49:04 +00:00
#280: remove PALETTE_TRUSTED_IP_HEADER, rate limits key on peer address only
fen pushed to fix-280-r2 at poslop/palette 2026-09-18 01:48:53 +00:00
aac1725c25 #280: remove PALETTE_TRUSTED_IP_HEADER, key rate limits on peer address only
fen created branch fix-280-r2 in poslop/palette 2026-09-18 01:48:53 +00:00
fen pushed to dev at poslop/palette 2026-09-18 01:48:44 +00:00
880f3cd958 Merge pull request 'Sync main into dev (owner README edit #279)' (#290) from dev-main-sync into dev
1149989d07 Merge pull request 'Release v0.5.0: dev -> main' (#288) from dev into main
bc52f0a608 Merge pull request 'Update README.md' (#279) from poslop-patch-1 into main
84d19556fc Update README.md
Compare 4 commits »