jcoffey-dev 0cd663b75b CI: gofmt config.go; run the editor tests by file name, which Node 22 needs

2026-10-10 23:59:01 -07:00

..

banner.go

Quick posts: banners and alerts (scheduled, data/banners.yaml), news posts, events and front page edits, each posted, checked and published in one step; docs and roadmap

2026-10-10 19:52:19 -07:00

config.go

CI: gofmt config.go; run the editor tests by file name, which Node 22 needs

2026-10-10 23:59:01 -07:00

event.go

Quick posts: banners and alerts (scheduled, data/banners.yaml), news posts, events and front page edits, each posted, checked and published in one step; docs and roadmap

2026-10-10 19:52:19 -07:00

load_test.go

E6: social cards drawn at build time, og:image:alt, fediverse:creator; dependencies back to releases at least two weeks old

2026-10-10 18:11:56 -07:00

load.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

look_test.go

E3: look panel with live preview and contrast checks, look.yaml in the starter, theme docs

2026-10-10 17:40:17 -07:00

look.go

E3: look panel with live preview and contrast checks, look.yaml in the starter, theme docs

2026-10-10 17:40:17 -07:00

markdown.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

media_test.go

media: responsive pictures for media/ images; image-location and image-weight checks; multi-account plan on the roadmap

2026-10-10 16:42:18 -07:00

media.go

editor: picture upload, insert dialog with required alt text, pictures library

2026-10-10 16:49:22 -07:00

page.go

Events and calendars: start/end in the site's time zone, iCalendar feeds (webcal) and per-event files, upcoming/past, schema.org data; calendar pack bundled; packs can add collection settings

2026-10-10 19:41:56 -07:00

paginate_test.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

paginate.go

Pagination in the starter: numbered page links, prev/next in the head, page number in titles; docs

2026-10-10 19:28:37 -07:00

taxonomy.go

What the jcoffey.dev port needed: pagination, tags, redirects, RSS, search

2026-10-10 13:42:46 -07:00

text.go

What the jcoffey.dev port needed: pagination, tags, redirects, RSS, search

2026-10-10 13:42:46 -07:00