poslop
0 Followers · 0 Following
  • Joined on 2024-02-11
Repositories
10
 Projects Packages Public Activity Starred Repositories
poslop pushed to main at poslop/palette 2026-09-09 14:27:52 +00:00
7ca1b58362 Merge pull request 'docs: attachments & storage backend design (#38, #31)' (#69) from issue-38-31-storage-design into main
594b5f01aa docs: attachments & storage backend design (#38, #31)
Compare 2 commits »
poslop merged pull request poslop/palette#69 2026-09-09 14:27:50 +00:00
docs: attachments & storage backend design (#38, #31)
poslop pushed to main at poslop/palette 2026-09-09 14:27:16 +00:00
8d0825ac09 Merge pull request 'docs: cookie-based preferences and access keys design (#30)' (#70) from issue-30-cookie-design into main
5a2aa0f96d docs: design note for cookie-based preferences and access keys (#30)
Compare 2 commits »
poslop merged pull request poslop/palette#70 2026-09-09 14:27:15 +00:00
docs: cookie-based preferences and access keys design (#30)
poslop closed issue poslop/palette#30 2026-09-09 14:27:15 +00:00
FUTURE: cookie-based preferences and access keys
poslop pushed to main at poslop/palette 2026-09-09 14:26:27 +00:00
4cb8a3e127 Merge pull request 'Search: loading indicator and performance note (#32)' (#72) from issue-32-search-indicator into main
c288fc73a7 Search: spinner indicator + performance note on client-side filtering (#32)
Compare 2 commits »
poslop merged pull request poslop/palette#72 2026-09-09 14:26:26 +00:00
Search: loading indicator and performance note (#32)
poslop closed issue poslop/palette#32 2026-09-09 14:26:26 +00:00
Search: loading indicator and performance review
poslop merged pull request poslop/palette#78 2026-09-09 14:26:20 +00:00
fix: input validation gaps (#68)
poslop closed issue poslop/palette#68 2026-09-09 14:26:20 +00:00
[pentest] Input validation gaps: negative/huge content accepted, expires_at ignored, limit=0 ignored
poslop pushed to main at poslop/palette 2026-09-09 14:26:20 +00:00
91dbf6f344 Merge pull request 'fix: input validation gaps (#68)' (#78) from issue-68-input-validation into main
94a4a3c2ec fix: input validation gaps (#68)
Compare 2 commits »
poslop pushed to main at poslop/palette 2026-09-09 14:26:15 +00:00
b600cdf51a Merge pull request 'Admin key endpoint: per-IP rate limiting and lockout (#66)' (#73) from issue-66-admin-ratelimit into main
9811191648 admin: per-IP rate limit (5/min) on admin key attempts (#66)
Compare 2 commits »
poslop merged pull request poslop/palette#73 2026-09-09 14:26:14 +00:00
Admin key endpoint: per-IP rate limiting and lockout (#66)
poslop closed issue poslop/palette#66 2026-09-09 14:26:14 +00:00
[pentest] Admin key endpoint has no rate limiting or lockout (offline brute force possible)
poslop pushed to main at poslop/palette 2026-09-09 14:26:08 +00:00
47c9fa6386 Merge pull request 'Clamp expires_in at API boundary (#60)' (#74) from issue-60-expiry-clamp into main
bb5c4f0186 fix #60: apply ValidExpiry clamp to cans create handler (was lost in working tree)
f611cc3e9e fix #60: clamp expires_in on cans API (400 on zero/negative, cap 1yr)
Compare 3 commits »
poslop merged pull request poslop/palette#74 2026-09-09 14:26:07 +00:00
Clamp expires_in at API boundary (#60)
poslop closed issue poslop/palette#60 2026-09-09 14:26:07 +00:00
Security: clamp expires_in at API boundary (reject zero/negative, cap 1yr)
poslop pushed to main at poslop/palette 2026-09-09 14:26:03 +00:00
44fe3c5772 Merge pull request 'Security headers middleware: CSP, Referrer-Policy, nosniff (#59)' (#76) from issue-59-security-headers into main
e08cafe9c8 security headers middleware: CSP, Referrer-Policy, nosniff on HTML pages (#59)
Compare 2 commits »
poslop pushed to main at poslop/palette 2026-09-09 14:26:03 +00:00
b7d1119d6d Merge pull request 'docs: design for optional client-side E2E encryption (issue #39)' (#75) from issue-39-e2e-design into main
2159982795 docs: design for optional client-side E2E encryption (issue #39)
f6c4342468 Exclude password-protected pastes from public listings (#65)
Compare 3 commits »
poslop merged pull request poslop/palette#75 2026-09-09 14:26:02 +00:00
docs: design for optional client-side E2E encryption (issue #39)