jcoffey-dev ba0fe1f8d2 Release preparation: the editor interface is committed (so go install works) and checked in CI; release build script for Linux, macOS and Windows; Gitea CI and tag-driven release workflows; install section in the README

2026-10-10 22:09:10 -07:00

..

ui/dist

Release preparation: the editor interface is committed (so go install works) and checked in CI; release build script for Linux, macOS and Windows; Gitea CI and tag-driven release workflows; install section in the README

2026-10-10 22:09:10 -07:00

config.go

Editor footer: copyright, coffeylabs.org, version, source and license links, the operator's own links; AGPL source link on the endpoint

2026-10-10 19:31:41 -07:00

discover.go

GitHub live test fixes: site finder ignores GitHub's lagging repo size, merged drafts deleted, numbered no-reply commit address; docs say which platforms the editor fully supports

2026-10-10 21:22:18 -07:00

editing.go

Editor: mention the review's preview only when there is one; share the home page under the site's name

2026-10-10 22:05:04 -07:00

editor_test.go

Editor: New page while on a draft adds the page to that draft

2026-10-10 21:42:43 -07:00

files.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

forms.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

frontmatter.go

editor: sections as cards with forms from each template's fields; front matter edits keep order and unchanged style

2026-10-10 17:31:05 -07:00

live.go

E5: visual editing that keeps untouched Markdown exactly, point and edit; renew expiring platform tokens

2026-10-10 18:01:21 -07:00

look.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

media_test.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

media.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

oauth.go

GitHub live test fixes: site finder ignores GitHub's lagging repo size, merged drafts deleted, numbered no-reply commit address; docs say which platforms the editor fully supports

2026-10-10 21:22:18 -07:00

privacy.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

quick.go

Quick posts: banners and alerts (scheduled, data/banners.yaml), news posts, events and front page edits, each posted, checked and published in one step; docs and roadmap

2026-10-10 19:52:19 -07:00

redirects.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

repos.go

GitHub live test fixes: site finder ignores GitHub's lagging repo size, merged drafts deleted, numbered no-reply commit address; docs say which platforms the editor fully supports

2026-10-10 21:22:18 -07:00

searchengines.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

sections.go

editor: sections as cards with forms from each template's fields; front matter edits keep order and unchanged style

2026-10-10 17:31:05 -07:00

server.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

session.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

workspace.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00