Jarian Cottingham df82068aeb fix: CSRF protection, cookie security flags, rate limiting, XSS (#23,#24,#25,#28,#33) ...

Add CSRF tokens to all cookie-based POST endpoints.
Set Secure and SameSite=Strict on auth cookie.
Rate limit login to 5 attempts per 15min per IP.
Escape HTML in signing error messages (XSS fix).
Remove duplicate get_user_from_cookie definition.

2026-07-04 04:51:56 +00:00

..

templates

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

auth.py

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

config.py

fix: generate JWT secret on first boot instead of hardcoded default (#19)

2026-07-04 04:48:30 +00:00

main.py

fix: CSRF protection, cookie security flags, rate limiting, XSS (#23,#24,#25,#28,#33)

2026-07-04 04:51:56 +00:00

models.py

Fix setup.sh: add -k flag, NSS import for Fedora, correct trust flags, LibreWolf docs

2026-07-01 04:51:40 +00:00

signing.py

fix: pass YubiKey PIN via stdin instead of CLI arg (#18, #31)

2026-07-04 04:49:56 +00:00