hotdog-cms

about

Editor footer: copyright, coffeylabs.org, version, source and license links, the operator's own links; AGPL source link on the endpoint

2026-10-10 19:31:41 -07:00

build

Starter footer: copyright_url links the copyright holder

2026-10-10 22:45:20 -07:00

check

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

ci

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

editor

Release preparation: the editor interface is committed (so go install works) and checked in CI; release build script for Linux, macOS and Windows; Gitea CI and tag-driven release workflows; install section in the README

2026-10-10 22:09:10 -07:00

endpoint

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

forge

Rename to HotDog CMS: hotdog-cms command and module, HOTDOG_ settings, hotdog- site hooks, brand assets, branded editor

2026-10-10 15:57:07 -07:00

forms

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

gitx

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

importer

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

isolate

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

markup

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

media

editor: picture upload, insert dialog with required alt text, pictures library

2026-10-10 16:49:22 -07:00

packs

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

preview

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

publish

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

serve

Rename to HotDog CMS: hotdog-cms command and module, HOTDOG_ settings, hotdog- site hooks, brand assets, branded editor

2026-10-10 15:57:07 -07:00

site

CI: gofmt config.go; run the editor tests by file name, which Node 22 needs

2026-10-10 23:59:01 -07:00

siteyaml

Events and calendars: start/end in the site's time zone, iCalendar feeds (webcal) and per-event files, upcoming/past, schema.org data; calendar pack bundled; packs can add collection settings

2026-10-10 19:41:56 -07:00