jcoffey-dev 519bf85303 Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

..

html2md_test.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

html2md.go

E9: import from WordPress (live or export), Hugo, Jekyll and Ghost, with pictures, redirects and a report

2026-10-10 18:42:51 -07:00

importer_test.go

E9: import from WordPress (live or export), Hugo, Jekyll and Ghost, with pictures, redirects and a report

2026-10-10 18:42:51 -07:00

sources.go

E9: import from WordPress (live or export), Hugo, Jekyll and Ghost, with pictures, redirects and a report

2026-10-10 18:42:51 -07:00

wordpress.go

E9: import from WordPress (live or export), Hugo, Jekyll and Ghost, with pictures, redirects and a report

2026-10-10 18:42:51 -07:00

write.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00