Jarian
|
ec78c42e4e
|
fix: add Docker deployment, nginx security headers, remove sys.path.insert
- Add Dockerfile, docker-compose.yml, .dockerignore (Issue #11)
- Add nginx config with CSP, HSTS, X-Frame-Options, X-Content-Type-Options headers (Issue #14)
- Hide server version via server_tokens off, strip x-response-time-ms (Issues #21, #22)
- Replace sys.path.insert with proper src.* imports + importlib fallback (Issue #7)
- Add config.json.example template (Issue #5)
|
2026-07-05 11:46:04 +00:00 |
|
Jarian
|
cedc0fd51e
|
fix: address security and ops issues (#2-#8)
- Fix path traversal vulnerability in TVDB cache (CWE-22)
- Support TVDB_API_KEY env var to avoid hardcoded secrets
- Add config.json to .gitignore, remove from git history
- Add pyproject.toml for proper packaging, remove sys.path.insert
- Add file hash to duplicate detection (reduce false positives)
- Require --force flag for --auto-delete-duplicates deletion
- Log deletions to recovery manifest
- Create .env.example template
|
2026-07-05 08:07:05 +00:00 |
|