This repository was archived by the owner on Jul 28, 2026. It is now read-only.

sync - #30

Merged

ddrayko merged 12 commits into

betafrom

Jul 16, 2026

Commits on Jul 15, 2026

Merge pull request #29 from ZeroHost-Code/beta
ddrayko
authored
9de42bb
Add CSRF protection middleware (double-submit cookie pattern)
ddrayko
committed
d23d0b8
Add rate limiting to static/admin routes
ddrayko
committed
a7822fc
Sanitize img.src assignments to prevent XSS via javascript: URLs
ddrayko
committed
3f01fb0
Escape exception messages before inserting into innerHTML (XSS prevention)
ddrayko
committed
bd110c1
Add explicit workflow permissions (contents: read)
ddrayko
committed
27e683d
Bump version to 1.0.9 (sidebar + package.json)
ddrayko
committed
c760077
Validate image URLs via URL constructor to prevent XSS
ddrayko
committed
4947222
Add protocol whitelist for image URL validation
ddrayko
committed
5c018f7

Commits on Jul 16, 2026

Update README.md
ddrayko
authored
ecc7b28
Update README.md
ddrayko
authored
dab2953
Add search bar to admin servers page (filter by server name or owner)
ddrayko
committed
7952475