fix: resolve 3 security audit issues

Browse Source

#3: Stored XSS in stats dashboard - escape p[path] with html.escape()
#4: Caddy timeout race - increase read/write_timeout 30s -> 60s
#5: Missing CSP header - add Content-Security-Policy to Caddyfile

...

This commit is contained in:

akiba

2026-06-30 14:03:48 +00:00

parent 085cc7a140

commit 122c408fff

32 changed files with 9066 additions and 859 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1

cache/e9ae0b4af5e27fb4b4cdc84ff13fd450 vendored Normal file

File diff suppressed because one or more lines are too long