certauth

Go to file

Jarian Cottingham df82068aeb fix: CSRF protection, cookie security flags, rate limiting, XSS (#23,#24,#25,#28,#33)

Add CSRF tokens to all cookie-based POST endpoints.
Set Secure and SameSite=Strict on auth cookie.
Rate limit login to 5 attempts per 15min per IP.
Escape HTML in signing error messages (XSS fix).
Remove duplicate get_user_from_cookie definition.

2026-07-04 04:51:56 +00:00

api

fix: CSRF protection, cookie security flags, rate limiting, XSS (#23,#24,#25,#28,#33)

2026-07-04 04:51:56 +00:00

landing

update local changes

2026-07-03 01:14:04 +00:00

tests

fix: CSRF protection, cookie security flags, rate limiting, XSS (#23,#24,#25,#28,#33)

2026-07-04 04:51:56 +00:00

.env.example

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

.gitignore

Add secrets to .gitignore

2026-07-01 04:52:16 +00:00

Caddyfile

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

Caddyfile-playground.ms

update local changes

2026-07-03 01:14:04 +00:00

certauth-api.service

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

nginx-local.conf

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

nginx-playground.ms

update local changes

2026-07-03 01:14:04 +00:00

PLAN.md

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

setup-certauth.sh

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

SKILL.md

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00