peter e4ac061721 feat(security): add baseline security response headers (E1 S4, SEC-1) ...

A small, safe set applied to every response via middleware: X-Content-Type-Options
nosniff, Referrer-Policy strict-origin-when-cross-origin, CSP frame-ancestors
'none' (anti-clickjacking; unrelated to the YouTube/Plex embeds we host), and
Permissions-Policy disabling camera/mic/geolocation. A full CSP and HSTS are
deferred (HSTS belongs on the Caddy edge).

2026-08-18 02:34:45 +02:00

..

downloads

refactor(downloads): route worker terminal writes through an atomic finalize_if_running (B-sub-1 review)

2026-08-18 00:58:13 +02:00

plex

fix(plex): make the cast gate self-correcting as well as non-shrinking (B-sub-2 review)

2026-08-18 00:58:13 +02:00

routes

fix(auth): epoch-check the target on account switch to avoid a full wallet logout (B-core-9)

2026-08-18 00:22:15 +02:00

static

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

sync

refactor(backfill): centralize the reserve-yield guard and drop the per-page connection hold

2026-08-16 02:41:49 +02:00

youtube

fix(config): degrade gracefully on a TOKEN_ENCRYPTION_KEY mismatch instead of a 500 (B-core-2)

2026-08-18 00:22:15 +02:00

__init__.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

audit.py

fix(audit): address /code-review findings

2026-07-12 07:47:07 +02:00

auth.py

fix(config): degrade gracefully on a TOKEN_ENCRYPTION_KEY mismatch instead of a 500 (B-core-2)

2026-08-18 00:22:15 +02:00

config.py

feat(plex): S5a HU-overlay backend — schema, guid, overlay sync

2026-08-16 22:16:54 +02:00

db.py

fix(plex): image proxy no longer exhausts the DB connection pool

2026-07-06 07:14:28 +02:00

demo.py

refactor: R12 S3 — invert scheduler->routes, publish cross-module privates

2026-08-11 22:58:10 +02:00

email.py

feat(ux): R11 feedback symmetry — Plex/download/rollback/deny notices

2026-08-11 05:05:50 +02:00

feedquery.py

refactor: address code-review — layering + public API naming

2026-08-17 18:23:03 +02:00

main.py

feat(security): add baseline security response headers (E1 S4, SEC-1)

2026-08-18 02:34:45 +02:00

models.py

feat(plex): S5b persist rich detail + serve item/show detail from DB

2026-08-16 23:11:15 +02:00

notifications.py

fix(downloads): derive title clamp from the column + real-Postgres regression

2026-08-16 19:40:17 +02:00

progress.py

feat(scheduler): admin run-now/run-all triggers + live progress + completion notices

2026-06-18 04:01:10 +02:00

quota.py

refactor(backfill): centralize the reserve-yield guard and drop the per-page connection hold

2026-08-16 02:41:49 +02:00

ratelimit.py

feat(demo): demo-account schema + reusable rate limiter

2026-06-16 09:17:14 +02:00

realtime.py

feat(messages): end-to-end encrypted real-time direct messaging backend

2026-06-25 22:05:35 +02:00

scheduler.py

refactor: R12 S3 — invert scheduler->routes, publish cross-module privates

2026-08-11 22:58:10 +02:00

security.py

fix(auth): security hardening — token encryption, timing, adoption + isolation

2026-07-11 21:26:39 +02:00

state.py

refactor(auth): centralize token hashing, email validation & admin gating

2026-06-26 03:15:36 +02:00

sysconfig.py

fix(config): degrade gracefully on a TOKEN_ENCRYPTION_KEY mismatch instead of a 500 (B-core-2)

2026-08-18 00:22:15 +02:00

titles.py

fix(downloads): stop a ReDoS title and a fatal thumbnail convert from wedging/killing downloads

2026-08-12 18:27:35 +02:00

userscope.py

feat(security): R4 S3 — abuse & leak hardening

2026-07-23 03:38:57 +02:00

utils.py

refactor: address code-review — layering + public API naming

2026-08-17 18:23:03 +02:00

worker.py

refactor(downloads): route worker terminal writes through an atomic finalize_if_running (B-sub-1 review)

2026-08-18 00:58:13 +02:00