palette

3 Commits

Include renames

Author	SHA1	Message	Date
fen	d013f3965f	Require secrets via headers only: drop ?key= and ?password= query fallbacks (#137 , #141 ) CI / test (pull_request) Successful in 28s Details CI / docker (pull_request) Skipped Details Query strings leak into Traefik access logs, browser history, and Referer headers. Admin key is now accepted only via X-Admin-Key; paste and can passwords only via X-Paste-Password (or the POST unlock form). Tests updated; new negative cases assert 401 for the query paths.	2026-09-09 23:23:10 -05:00
palette-agent	9811191648	admin: per-IP rate limit (5/min) on admin key attempts (#66 ) CI / test (pull_request) Successful in 23s Details CI / docker (pull_request) Skipped Details	2026-09-09 09:15:01 -05:00
poslop	4f1e901f04	Refactor: split monolith into cmd/palette + internal/{store,api,web,lang} (#35 ) CI / test (push) Successful in 19s Details CI / docker (push) Failing after 2m7s Details	2026-09-09 01:33:39 -05:00