palette

Bound title and language at create time (#86 )

CI #83:Commit 389e4d333f pushed by poslop

#91

2026-09-09 15:59:07 +00:00

22s

Rate-limit all password verification attempts (#81 )

CI #82:Commit 99a044e8a2 pushed by poslop

#90

2026-09-09 15:58:46 +00:00

23s

ratelimit: key on rightmost X-Forwarded-For entry (fixes #85 )

CI #81:Commit 3d1d5ee1fd pushed by poslop

#89

2026-09-09 15:58:33 +00:00

23s

#83 : accept boolean public field in create API (false->unlisted, true->public)

CI #80:Commit ccb22a2d28 pushed by poslop

#88

2026-09-09 15:58:23 +00:00

25s

fix #84 : security headers dropped because they were set post-flush; set pre-handler

CI #79:Commit 3d415edbdc pushed by poslop

#87

2026-09-09 15:54:40 +00:00

22s

Merge pull request 'docs: attachments & storage backend design (#38 , #31 )' (#69 ) from issue-38-31-storage-design into main

CI #78:Commit 7ca1b58362 pushed by poslop

v0.2.1

2026-09-09 14:32:51 +00:00

57s

Merge pull request 'docs: attachments & storage backend design (#38 , #31 )' (#69 ) from issue-38-31-storage-design into main

CI #77:Commit 7ca1b58362 pushed by poslop

main

2026-09-09 14:28:13 +00:00

21s

Merge pull request 'docs: cookie-based preferences and access keys design (#30 )' (#70 ) from issue-30-cookie-design into main

CI #76:Commit 8d0825ac09 pushed by poslop

main

2026-09-09 14:27:38 +00:00

20s

Merge pull request 'Search: loading indicator and performance note (#32 )' (#72 ) from issue-32-search-indicator into main

CI #75:Commit 4cb8a3e127 pushed by poslop

main

2026-09-09 14:27:21 +00:00

31s

Merge pull request 'fix: input validation gaps (#68 )' (#78 ) from issue-68-input-validation into main

CI #74:Commit 91dbf6f344 pushed by poslop

main

2026-09-09 14:27:12 +00:00

25s

Merge pull request 'Admin key endpoint: per-IP rate limiting and lockout (#66 )' (#73 ) from issue-66-admin-ratelimit into main

CI #73:Commit b600cdf51a pushed by poslop

main

2026-09-09 14:26:53 +00:00

27s

Merge pull request 'Clamp expires_in at API boundary (#60 )' (#74 ) from issue-60-expiry-clamp into main

CI #72:Commit 47c9fa6386 pushed by poslop

main

2026-09-09 14:26:49 +00:00

25s

Merge pull request 'docs: design for optional client-side E2E encryption (issue #39 )' (#75 ) from issue-39-e2e-design into main

CI #71:Commit b7d1119d6d pushed by poslop

main

2026-09-09 14:26:26 +00:00

21s

Merge pull request 'docs: design for optional client-side E2E encryption (issue #39 )' (#75 ) from issue-39-e2e-design into main

CI #70:Commit b7d1119d6d pushed by poslop

main

2026-09-09 14:26:25 +00:00

22s

Merge pull request 'fix #63 : require deletion token on DELETE /api/pastes/{id}' (#79 ) from issue-63-delete-auth into main

CI #69:Commit 556d0fa2e1 pushed by poslop

main

2026-09-09 14:26:02 +00:00

19s

Merge pull request 'fix: atomic burn-after-read claim (#58 )' (#77 ) from issue-58-burn-race into main

CI #68:Commit bdd5235f2e pushed by poslop

main

2026-09-09 14:25:27 +00:00

20s

fix #63 : require deletion token on DELETE /api/pastes/{id}

CI #67:Commit 91568c0598 pushed by poslop

#79

2026-09-09 14:22:05 +00:00

24s

fix: input validation gaps (#68 )

CI #66:Commit 94a4a3c2ec pushed by poslop

#78

2026-09-09 14:22:04 +00:00

25s

fix: atomic burn-after-read claim (#58 )

CI #65:Commit 78374b2d49 pushed by poslop

#77

2026-09-09 14:19:29 +00:00

22s

security headers middleware: CSP, Referrer-Policy, nosniff on HTML pages (#59 )

CI #64:Commit e08cafe9c8 pushed by poslop

#76

2026-09-09 14:17:32 +00:00

32s

docs: design for optional client-side E2E encryption (issue #39 )

CI #63:Commit 2159982795 pushed by poslop

#75

2026-09-09 14:17:22 +00:00

26s

fix #60 : apply ValidExpiry clamp to cans create handler (was lost in working tree)

CI #62:Commit bb5c4f0186 pushed by poslop

#74

2026-09-09 14:16:25 +00:00

28s

admin: per-IP rate limit (5/min) on admin key attempts (#66 )

CI #61:Commit 9811191648 pushed by poslop

#73

2026-09-09 14:15:32 +00:00

24s

docs: design note for cookie-based preferences and access keys (#30 )

CI #60:Commit 5a2aa0f96d pushed by poslop

#70

2026-09-09 14:15:15 +00:00

22s

fix: anchor gitignore binary pattern, track cmd/palette

CI #59:Commit 03bf327f6b pushed by poslop

#70

2026-09-09 14:15:02 +00:00

23s

docs: design note for cookie-based preferences and access keys (#30 )

CI #58:Commit 5a2aa0f96d pushed by poslop

#70

2026-09-09 14:14:49 +00:00

20s

Search: spinner indicator + performance note on client-side filtering (#32 )

CI #57:Commit c288fc73a7 pushed by poslop

#72

2026-09-09 14:14:11 +00:00

20s

Exclude password-protected pastes from public listings (#65 )

CI #56:Commit f6c4342468 pushed by poslop

#71

2026-09-09 14:13:50 +00:00

21s

docs: design note for cookie-based preferences and access keys (#30 )

CI #55:Commit 07950e27ac pushed by poslop

#70

2026-09-09 14:13:47 +00:00

20s

docs: attachments & storage backend design (#38 , #31 )

CI #54:Commit 594b5f01aa pushed by poslop

#69

2026-09-09 14:10:36 +00:00

19s