hobokenchicken
6384588122
chore: bump to 0.2.10 (versionCode 2010)
2026-07-21 10:09:20 -04:00
hobokenchicken
738b9b17ff
fix: add unsafe-inline to Tauri script-src CSP
Release Desktop Apps / build-linux (push) Successful in 4m50s
Release Desktop Apps / build-windows (push) Successful in 16m59s
Release Desktop Apps / release (push) Successful in 11s
2026-07-20 13:42:21 -04:00
hobokenchicken
57aec2c6b3
sec: hash tokens in DB, set Tauri CSP, escape quotes in XSS guard
...
- Session and email verification/reset tokens stored as SHA-256 hash in DB
(raw token stays client-side in cookie/email link)
- Tauri CSP set: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline';
img-src 'self' data: https:; connect-src 'self' wss: https:
- escapeHtml now handles double and single quotes to prevent attribute-based XSS
2026-07-20 13:13:09 -04:00
hobokenchicken
a5882f32c4
chore: bump to v0.2.9 (version code 2009)
2026-07-20 11:37:26 -04:00
hobokenchicken
4cc6c6f1ed
chore: bump to v0.2.8 (version code 2008)
2026-07-20 10:25:47 -04:00
hobokenchicken
0ab08a9374
chore: bump to v0.2.7 (version code 2007)
2026-07-20 10:01:32 -04:00
hobokenchicken
aa0af5db4f
feat: account deletion in settings + privacy policy with deletion link
2026-07-17 15:47:29 -04:00
hobokenchicken
e79505d8b4
fix(tauri): disable WebKitGTK sandbox inside AppImage on Linux and bump version to 0.2.6
2026-07-16 15:28:36 -04:00
hobokenchicken
62b8097746
bump: desktop app v0.2.0, build all Linux bundles (appimage, deb, rpm)
2026-07-07 10:20:27 -04:00
hobokenchicken
a3064b94ab
feat: Tauri desktop app scaffold
...
- src-tauri/ with Rust backend, Cargo.toml, main.rs, lib.rs
- tauri.conf.json: Linux deb bundle with webkit2gtk deps
- package.json: added tauri script
- Build on a machine with Rust: cd web && npm run tauri build
2026-07-06 18:07:34 +00:00
hobokenchicken