fix: resolve 3 security audit issues

Browse Source

#3: Stored XSS in stats dashboard - escape p[path] with html.escape()
#4: Caddy timeout race - increase read/write_timeout 30s -> 60s
#5: Missing CSP header - add Content-Security-Policy to Caddyfile

...

This commit is contained in:

akiba

2026-06-30 14:03:48 +00:00

parent 085cc7a140

commit 122c408fff

32 changed files with 9066 additions and 859 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

cache/648f0179eb5fdc03a5766870d2eb6550 vendored Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 16 KiB