• Joined on 2026-09-09
fen created branch fix-280 in poslop/palette 2026-09-18 01:35:20 +00:00
fen created pull request poslop/palette#287 2026-09-18 01:35:20 +00:00
HIGH #280: rate limiter bypassable via X-Forwarded-For
fen pushed to dev at poslop/palette 2026-09-18 01:35:18 +00:00
ed435c5e13 Merge pull request 'Fix #282: jumpnav visible on mobile initial load' (#285) from fix-282 into dev
3460d54fce Fix #282: re-evaluate jumpnav visibility after layout settles on load
Compare 2 commits »
fen closed issue poslop/palette#282 2026-09-18 01:35:16 +00:00
MEDIUM: jump-to-top/bottom nav hidden on mobile until a resize event
fen merged pull request poslop/palette#285 2026-09-18 01:35:16 +00:00
Fix #282: jumpnav visible on mobile initial load
fen pushed to dev at poslop/palette 2026-09-18 01:33:50 +00:00
c190dd9ea6 Merge pull request '#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)' (#286) from fix-281 into dev
8901a3c82c #281: /raw streams attachment blob for all attachment mimes
Compare 2 commits »
fen merged pull request poslop/palette#286 2026-09-18 01:33:45 +00:00
#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)
fen deleted branch release-readme-v0.5.0 from poslop/palette 2026-09-18 01:33:29 +00:00
fen pushed to dev at poslop/palette 2026-09-18 01:33:29 +00:00
d4da322031 Merge pull request 'Release v0.5.0: README refresh' (#278) from release-readme-v0.5.0 into dev
f3fe2335d4 Release v0.5.0: README refresh
Compare 2 commits »
fen merged pull request poslop/palette#278 2026-09-18 01:33:27 +00:00
Release v0.5.0: README refresh
fen deleted branch fix-280 from poslop/palette 2026-09-18 01:33:22 +00:00
fen pushed to dev at poslop/palette 2026-09-18 01:33:05 +00:00
eca8533d70 Merge pull request 'Fix #280: rate limiter keys buckets on peer address, not client-controlled X-Forwarded-For' (#284) from fix-280 into dev
f63efc6d88 Fix rate limiter bypass via client-controlled X-Forwarded-For (#280)
Compare 2 commits »
fen closed issue poslop/palette#280 2026-09-18 01:33:04 +00:00
HIGH: rate limiter bypassable via X-Forwarded-For
fen merged pull request poslop/palette#284 2026-09-18 01:33:04 +00:00
Fix #280: rate limiter keys buckets on peer address, not client-controlled X-Forwarded-For
fen deleted branch dev-sync from poslop/palette 2026-09-18 01:32:56 +00:00
fen pushed to dev at poslop/palette 2026-09-18 01:32:56 +00:00
5770b2f88e Merge pull request 'Sync main into dev before v0.5.0 release' (#277) from dev-sync into dev
fe5960f803 Merge remote-tracking branch 'origin/main' into dev-sync
e81f825ab8 Merge pull request 'Update README.md' (#252) from poslop-adjust-images into main
3d50a264ed Update README.md
522e016a29 Merge pull request 'Release v0.4.0: dev -> main' (#251) from dev into main
Compare 5 commits »
fen merged pull request poslop/palette#277 2026-09-18 01:32:55 +00:00
Sync main into dev before v0.5.0 release
fen created pull request poslop/palette#286 2026-09-18 01:32:12 +00:00
#281: /raw/{id} returns empty body for non-image attachment pastes (Fix attempt 1)
fen pushed to fix-281 at poslop/palette 2026-09-18 01:31:58 +00:00
8901a3c82c #281: /raw streams attachment blob for all attachment mimes
fen created branch fix-281 in poslop/palette 2026-09-18 01:31:58 +00:00