jcoffey-dev 519bf85303 Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

..

container.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00

indexnow_test.go

E6: search engine verification, IndexNow pings after publishing; docs

2026-10-10 18:23:51 -07:00

indexnow.go

E6: search engine verification, IndexNow pings after publishing; docs

2026-10-10 18:23:51 -07:00

publish_test.go

E10: packs (sections, layouts and styles as files, no code), before/after steps on publish targets, pipeline files maintainer-only in the editor; E6: share links

2026-10-10 19:20:17 -07:00

publish.go

E10: packs (sections, layouts and styles as files, no code), before/after steps on publish targets, pipeline files maintainer-only in the editor; E6: share links

2026-10-10 19:20:17 -07:00

pull.go

Security, second batch: pack and icon markup checked by parsing HTML; check runs security rules on redirect pages and flags script links; safe importer slugs and writes; Markdown attributes limited to id and class; plain form subjects; recipient allowlist; IPv6 rate limits per /64, stored submissions capped; bounded, rate-limited search; listener timeouts; bookkeeping files never served; collision-proof discovered ids and one discovery at a time; CI secrets kept from pushable branches; SECURITY.md and docs/security.md

2026-10-10 20:47:41 -07:00