jcoffey-dev 519bf85303 Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

..

preview_test.go

Rename to HotDog CMS: hotdog-cms command and module, HOTDOG_ settings, hotdog- site hooks, brand assets, branded editor

2026-10-10 15:57:07 -07:00

preview.go

Security: never follow symbolic links (git checks them out as files, sites refuse them, editor I/O through os.Root); valid branch names and --end-of-options; maintainers only publish pipeline changes; __Host- cookies and Secure from public_url; strict sign-in return path; real GitLab/Bitbucket permissions; safe page, feed and redirect paths; card logo/font read inside the site with limits; page size cap and safe printf; editor, preview and pull builds in a limited child process without secrets

2026-10-10 20:34:37 -07:00

server.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00