2 Commits

Author	SHA1	Message	Date
hobokenchicken	57aec2c6b3	sec: hash tokens in DB, set Tauri CSP, escape quotes in XSS guard ... - Session and email verification/reset tokens stored as SHA-256 hash in DB (raw token stays client-side in cookie/email link) - Tauri CSP set: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' wss: https: - escapeHtml now handles double and single quotes to prevent attribute-based XSS	2026-07-20 13:13:09 -04:00
hobokenchicken	e499ce884d	Initial scaffold: Go backend, React frontend, Docker Compose ... - Go backend: config, db (PostgreSQL migrations), auth (argon2id + sessions), middleware (cookie sessions, RequireAuth), chi router, cmd/server - React frontend: Vite + React 18 + TS + Tailwind + Gruvbox palette + terminal CSS - Docker: compose.yml (Postgres, Valkey, minio, LiveKit, coturn, Caddy), livekit.yaml, Caddyfile, Dockerfile (multi-stage Go+Node+Alpine) - .env.example, .gitignore, README.md	2026-06-26 14:41:10 -04:00