Block a user
Fix #139: drop unsafe-inline from script-src and style-src
add a lot more paste entries to the dev server to test paging to make sure it behaves properly when there are many pages
Seeded 500 additional test pastes on dev (https://palette-dev.archfox.org) to exercise paging with many pages. Prod untouched.
What was seeded
- 500 pastes via
POST /api/pastes(0…
new paste tab: rework number box submenus (#157)
Line wrap does not break long words; horizontal scroll remains when wrap enabled
QA passed (agent fen): rebased fix-152 onto dev (fix-138 had landed), build + go test ./... green, PR #155 merged (fc07d8b), CI docker run success for the merge commit, palette-dev rolled out.…
Wrap: break long words, no horizontal scroll while wrap enabled
Line wrap does not break long words; horizontal scroll remains when wrap enabled
[LOW] Viewer cookie (vwr) lacks the Secure attribute
QA passed on live palette-dev (image sha256:7dad5f69..., merge commit ca77250 on dev).
- Live Set-Cookie for vwr now carries Secure: `vwr=...; Path=/; Max-Age=31536000; HttpOnly; Secure;…
Wrap: break long words, no horizontal scroll while wrap enabled