49f7b6e7a4
add AGPLv3 license with copyright and warranty disclaimer notice
poslop2026-09-09 16:12:19 +00:00
959a83be1e
Merge pull request 'Bound title and language at create time (#86)' (#91) from fix-86-field-bounds into main
v0.2.2
poslop2026-09-09 15:59:32 +00:00
5b068faf8f
Merge pull request 'ratelimit: rightmost untrusted-hop-safe client IP (fixes#85)' (#89) from fix-85-xff into main
poslop2026-09-09 15:59:29 +00:00
b0360af79c
Merge pull request 'Fix #83: create API ignores boolean public field' (#88) from fix-83-public-false into main
poslop2026-09-09 15:59:26 +00:00
806798fae6
Merge pull request 'Rate-limit all password verification attempts (#81)' (#90) from fix-81-password-ratelimit into main
poslop2026-09-09 15:59:24 +00:00
8977c05cda
Merge pull request 'fix #84: security headers were silently dropped (set pre-handler)' (#87) from fix-84-headers-prewrite into main
poslop2026-09-09 15:59:21 +00:00
389e4d333f
Bound title and language at create time (#86)
fen2026-09-09 10:58:34 -05:00
99a044e8a2
Rate-limit all password verification attempts (#81)
fen2026-09-09 10:58:21 -05:00
ccb22a2d28#83: accept boolean public field in create API (false->unlisted, true->public)
Hermes Agent2026-09-09 10:57:56 -05:00
3d415edbdcfix#84: security headers dropped because they were set post-flush; set pre-handler
fen2026-09-09 10:54:16 -05:00
7ca1b58362
Merge pull request 'docs: attachments & storage backend design (#38, #31)' (#69) from issue-38-31-storage-design into main
v0.2.1
poslop2026-09-09 14:27:50 +00:00
8d0825ac09
Merge pull request 'docs: cookie-based preferences and access keys design (#30)' (#70) from issue-30-cookie-design into main
poslop2026-09-09 14:27:14 +00:00
4cb8a3e127
Merge pull request 'Search: loading indicator and performance note (#32)' (#72) from issue-32-search-indicator into main
poslop2026-09-09 14:26:25 +00:00
91dbf6f344
Merge pull request 'fix: input validation gaps (#68)' (#78) from issue-68-input-validation into main
poslop2026-09-09 14:26:19 +00:00
b600cdf51a
Merge pull request 'Admin key endpoint: per-IP rate limiting and lockout (#66)' (#73) from issue-66-admin-ratelimit into main
poslop2026-09-09 14:26:13 +00:00
47c9fa6386
Merge pull request 'Clamp expires_in at API boundary (#60)' (#74) from issue-60-expiry-clamp into main
poslop2026-09-09 14:26:07 +00:00
b7d1119d6d
Merge pull request 'docs: design for optional client-side E2E encryption (issue #39)' (#75) from issue-39-e2e-design into main
poslop2026-09-09 14:26:02 +00:00
44fe3c5772
Merge pull request 'Security headers middleware: CSP, Referrer-Policy, nosniff (#59)' (#76) from issue-59-security-headers into main
poslop2026-09-09 14:26:01 +00:00
556d0fa2e1
Merge pull request 'fix #63: require deletion token on DELETE /api/pastes/{id}' (#79) from issue-63-delete-auth into main
poslop2026-09-09 14:25:40 +00:00
bdd5235f2e
Merge pull request 'fix: atomic burn-after-read claim (#58)' (#77) from issue-58-burn-race into main
poslop2026-09-09 14:25:06 +00:00
91568c0598fix#63: require deletion token on DELETE /api/pastes/{id}
poslop2026-09-09 09:21:28 -05:00
a3349b4a98
Admin endpoint: ENV/file admin key, --reset-admin-key, settings API wired into ratelimit/max-bytes/default-expiry/burn-window (#40)
poslop2026-09-09 00:44:02 -05:00
03600b2ed5
sweep: fix missing view_count on HTML views, API expiry bounds, search ignoring custom slug (#33)
poslop2026-09-09 00:34:24 -05:00
cb23707125
pentest: bind unlock cookie to HMAC per-paste token; serve only safe content types on /raw and can items with nosniff (#34)
poslop2026-09-09 00:14:01 -05:00
238dc96454
README rework: user-first structure, features, screenshots, config table; API detail moved to docs/API.md (#47)
poslop2026-09-08 23:54:54 -05:00
d5a47b1a31
Burn after N reads: reads_limit/reads_used, per-viewer 15min dedupe via paste_views, reads_remaining in API+stats pill, raw counts as read (#49)
poslop2026-09-08 23:54:03 -05:00
127c12c79a
Custom expiry: Custom radio with number+unit select, client-side validation 1min-1year, Go-duration composition (#48)
poslop2026-09-08 23:54:03 -05:00
2e1ce508fa
Saved page: live search + sortable columns via shared table module (#57)
poslop2026-09-08 22:39:41 -05:00
76d7ac12e7
Small fixes: gutter alignment, paste column, sort arrows, copy feedback, stats bar, title slug (#50-#55)
poslop2026-09-08 22:35:43 -05:00
129934b645
My pastes page /mine with anonymous viewer cookie (#37)
poslop2026-09-08 22:10:05 -05:00
fen
fen
poslop
agent