fix: resolve 3 security audit issues

Browse Source

#3: Stored XSS in stats dashboard - escape p[path] with html.escape()
#4: Caddy timeout race - increase read/write_timeout 30s -> 60s
#5: Missing CSP header - add Content-Security-Policy to Caddyfile

...

This commit is contained in:

akiba

2026-06-30 14:03:48 +00:00

parent 085cc7a140

commit 122c408fff

32 changed files with 9066 additions and 859 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

4491

cache/92cf3bcddf1191c3c04ceea2383c8ed9 vendored Normal file

File diff suppressed because it is too large Load Diff