naibaandcloudcode c9bed85a91 fix(security): guard external hrefs and refine CSRF/auth-loading handling ...

- Add safeExternalHref(): only render http(s) URLs as clickable hrefs,
  blocking attacker-controlled template metadata from becoming
  javascript:/data: links.
- Refine CSRF header attachment and auth-loading state in the fetcher,
  api-tokens client, useAuth, and settings route.

Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>

2026-05-31 05:51:39 +00:00

..

api

fix(security): guard external hrefs and refine CSRF/auth-loading handling

2026-05-31 05:51:39 +00:00

components

feat(settings): add reserved hosts field and surface NAT errors

2026-05-31 02:04:47 +00:00

hooks

fix(security): guard external hrefs and refine CSRF/auth-loading handling

2026-05-31 05:51:39 +00:00

lib

fix(security): guard external hrefs and refine CSRF/auth-loading handling

2026-05-31 05:51:39 +00:00

locales

feat(settings): add reserved hosts field and surface NAT errors

2026-05-31 02:04:47 +00:00

routes

fix(security): guard external hrefs and refine CSRF/auth-loading handling

2026-05-31 05:51:39 +00:00

test

feat(api-tokens): add PAT management UI, CSRF handling, and auth-loading fixes

2026-05-30 15:56:53 +00:00

types

feat(settings): add reserved hosts field and surface NAT errors

2026-05-31 02:04:47 +00:00

error-page.tsx

Dashboard Redesign (#48)

2024-12-13 23:51:33 +08:00

index.css

fix: downgrade tailwindcss to v3 (#151)

2026-02-14 18:06:12 +08:00

main.tsx

feat(api-tokens): add PAT management UI, CSRF handling, and auth-loading fixes

2026-05-30 15:56:53 +00:00

vite-env.d.ts

🎉 init vite & shadcn-ui

2024-11-01 22:47:49 +08:00