Labels Milestones New Pull Request

0 Open 137 Closed

2 hours 17 minutes

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

Assigned

Critical

High

In Progress

Low

Medium

Owner Review

QA

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

fen poslop

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 137 Closed

2 hours 17 minutes

Label

Clear labels

Assigned

Critical

High

In Progress

Low

Medium

Owner Review

QA

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

fen

poslop

store: burn_after_reads>0 implies burn-after-read (#82)

#107

by poslop was merged 2026-09-09 23:40:22 +00:00

dev

fix-82-burn-implies-budget

Bound title and language at create time (#86)

#91

by poslop was merged 2026-09-09 15:59:32 +00:00

main

fix-86-field-bounds

Rate-limit all password verification attempts (#81)

#90

by poslop was merged 2026-09-09 15:59:24 +00:00

main

fix-81-password-ratelimit

ratelimit: rightmost untrusted-hop-safe client IP (fixes #85)

#89

by poslop was merged 2026-09-09 15:59:29 +00:00

main

fix-85-xff

Fix #83: create API ignores boolean public field

#88

by poslop was merged 2026-09-09 15:59:26 +00:00

main

fix-83-public-false

fix #84: security headers were silently dropped (set pre-handler)

#87

by poslop was merged 2026-09-09 15:59:21 +00:00

main

fix-84-headers-prewrite

fix #63: require deletion token on DELETE /api/pastes/{id}

#79

by poslop was merged 2026-09-09 14:25:40 +00:00

main

issue-63-delete-auth

fix: input validation gaps (#68)

#78

by poslop was merged 2026-09-09 14:26:20 +00:00

main

issue-68-input-validation

fix: atomic burn-after-read claim (#58)

#77

by poslop was merged 2026-09-09 14:25:06 +00:00

main

issue-58-burn-race

Security headers middleware: CSP, Referrer-Policy, nosniff (#59)

#76

by poslop was merged 2026-09-09 14:26:01 +00:00

main

issue-59-security-headers

docs: design for optional client-side E2E encryption (issue #39)

#75

by poslop was merged 2026-09-09 14:26:02 +00:00

main

issue-39-e2e-design

Clamp expires_in at API boundary (#60)

#74

by poslop was merged 2026-09-09 14:26:07 +00:00

main

issue-60-expiry-clamp

Admin key endpoint: per-IP rate limiting and lockout (#66)

#73

by poslop was merged 2026-09-09 14:26:14 +00:00

main

issue-66-admin-ratelimit

Search: loading indicator and performance note (#32)

#72

by poslop was merged 2026-09-09 14:26:26 +00:00

main

issue-32-search-indicator

Exclude password-protected pastes from public listings (#65)

#71

by poslop was closed 2026-09-09 14:29:53 +00:00

main

issue-65-listing-leak

1

docs: cookie-based preferences and access keys design (#30)

#70

by poslop was merged 2026-09-09 14:27:15 +00:00

main

issue-30-cookie-design

1

docs: attachments & storage backend design (#38, #31)

#69

by poslop was merged 2026-09-09 14:27:50 +00:00

main

issue-38-31-storage-design