Juan Denis 81aa19dafd fix(security): drop unsafe-inline/unsafe-eval from script-src ...

Move the theme FOUC snippet to /theme-init.js, allow the build-injected
vendor importmap by sha256, keep blob: for runtime extensions. Document the
localStorage token limitation in SECURITY.md.

2026-11-03 12:57:58 -05:00

..

app

fix(security): drop unsafe-inline/unsafe-eval from script-src

2026-11-03 12:57:58 -05:00

migrations

feat: provision isolated generic previews with retryable resource cleanup

2026-10-24 06:11:46 -04:00

serverkit_installer

fix(distro): patch all 6 failing distro-compatibility probes

2026-08-28 23:31:36 -04:00

templates

fix: require patched PHP runtimes in WordPress templates

2026-10-23 18:05:08 -04:00

tests

fix(security): drop unsafe-inline/unsafe-eval from script-src

2026-11-03 12:57:58 -05:00

_dbcheck.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

.bandit

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

.dockerignore

Compose: containerize backend & build frontend

2026-03-01 14:30:21 -05:00

.env.example

docs(env): document the ALLOW_* security opt-ins and demo/staging flags

2026-08-19 10:10:59 -04:00

.gitignore

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

.test_durations

test: record per-test durations so CI shards balance by time, not count

2026-08-06 03:25:21 -04:00

cli.py

Keep CLI commands from starting the daemons

2026-10-10 13:03:37 -04:00

config.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

requirements.txt

build(deps): bump bcrypt from 4.2.1 to 5.0.0 in /backend

2026-11-03 01:00:50 +00:00

run.py

Drop gevent and the stale backend Dockerfile

2026-10-10 13:40:55 -04:00

serverkit_cron_run.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

smoke_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00