fen
0 Followers · 0 Following
  • Joined on 2026-09-09
Repositories Projects Packages Public Activity Starred Repositories
fen created pull request poslop/palette#285 2026-09-18 01:30:23 +00:00
Fix #282: jumpnav visible on mobile initial load
fen created pull request poslop/palette#284 2026-09-18 01:30:18 +00:00
Fix #280: rate limiter keys buckets on peer address, not client-controlled X-Forwarded-For
fen pushed to fix-282 at poslop/palette 2026-09-18 01:30:11 +00:00
3460d54fce Fix #282: re-evaluate jumpnav visibility after layout settles on load
fen created branch fix-282 in poslop/palette 2026-09-18 01:30:11 +00:00
fen pushed to fix-280 at poslop/palette 2026-09-18 01:30:02 +00:00
f63efc6d88 Fix rate limiter bypass via client-controlled X-Forwarded-For (#280)
fen created branch fix-280 in poslop/palette 2026-09-18 01:30:02 +00:00
fen commented on issue poslop/palette#283 2026-09-18 01:27:19 +00:00
LOW findings from v0.5.0 pentest (record-only)

Prod check for item 5: created an identical small Go paste on p.archfox.org (p3jyh5) and palette-dev (hs86th). Both GET /api/pastes/{id} return language: null and the paste pages show no language…

fen opened issue poslop/palette#283 2026-09-18 01:25:33 +00:00
LOW findings from v0.5.0 pentest (record-only)
fen opened issue poslop/palette#282 2026-09-18 01:25:33 +00:00
MEDIUM: jump-to-top/bottom nav hidden on mobile until a resize event
fen opened issue poslop/palette#281 2026-09-18 01:25:33 +00:00
MEDIUM: /raw/{id} returns empty body for non-image attachment pastes
fen opened issue poslop/palette#280 2026-09-18 01:25:32 +00:00
HIGH: rate limiter bypassable via X-Forwarded-For
fen created pull request poslop/palette#278 2026-09-18 01:10:34 +00:00
Release v0.5.0: README refresh
fen pushed to release-readme-v0.5.0 at poslop/palette 2026-09-18 01:10:25 +00:00
f3fe2335d4 Release v0.5.0: README refresh
fen created branch release-readme-v0.5.0 in poslop/palette 2026-09-18 01:10:25 +00:00
fen pushed to dev-sync at poslop/palette 2026-09-18 00:55:48 +00:00
fe5960f803 Merge remote-tracking branch 'origin/main' into dev-sync
fen created branch dev-sync in poslop/palette 2026-09-18 00:55:48 +00:00
fen created pull request poslop/palette#277 2026-09-18 00:55:48 +00:00
Sync main into dev before v0.5.0 release
fen deleted branch fix-274 from poslop/palette 2026-09-17 23:58:19 +00:00
fen closed issue poslop/palette#274 2026-09-17 23:58:19 +00:00
When creating a new paste the line number bar numbers dont allign properly anymore with the actual text line
fen pushed to dev at poslop/palette 2026-09-17 23:56:36 +00:00
70b06db192 Merge pull request '#274: align editor line numbers with wrapped text rows' (#276) from fix-274 into dev
7fdb3ee61c #274: align editor line numbers with wrapped text rows
Compare 2 commits »