peter 9d3624d51b release: v0.39.0 ...

Auth security round: SB3 (email tokens out of URL query → fragment), SA4 (server-side
session revocation + 'Log out other sessions'), SA3 (trusted-proxy X-Forwarded-For so
rate limits can't be bypassed via a forged header).

2026-07-12 03:49:55 +02:00

..

public

fix(share): let link-preview crawlers fetch /watch/ pages (robots.txt)

2026-07-07 22:56:38 +02:00

src

release: v0.39.0

2026-07-12 03:49:55 +02:00

index.html

feat(share): rich link previews (Open Graph) for /watch pages

2026-07-07 20:19:30 +02:00

package-lock.json

feat(plex): P2 player — rich full-page HLS/direct player + watch-state

2026-07-05 04:28:00 +02:00

package.json

feat(plex): P2 player — rich full-page HLS/direct player + watch-state

2026-07-05 04:28:00 +02:00

postcss.config.js

feat: M4 (part 2) — React reader UI with theming

2026-06-11 02:19:47 +02:00

tailwind.config.js

feat: M4 (part 2) — React reader UI with theming

2026-06-11 02:19:47 +02:00

tsconfig.json

chore(hygiene): Phase 4 guardrails — noUnusedLocals/Parameters + dead-code sweep

2026-07-12 02:15:52 +02:00

vite.config.ts

fix(dev): vite proxy to 127.0.0.1 + throttle error notifications

2026-06-11 22:00:57 +02:00