hobokenchicken
738b9b17ff
fix: add unsafe-inline to Tauri script-src CSP
Release Desktop Apps / build-linux (push) Successful in 4m50s
Release Desktop Apps / build-windows (push) Successful in 16m59s
Release Desktop Apps / release (push) Successful in 11s
2026-07-20 13:42:21 -04:00
hobokenchicken
57aec2c6b3
sec: hash tokens in DB, set Tauri CSP, escape quotes in XSS guard
...
- Session and email verification/reset tokens stored as SHA-256 hash in DB
(raw token stays client-side in cookie/email link)
- Tauri CSP set: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline';
img-src 'self' data: https:; connect-src 'self' wss: https:
- escapeHtml now handles double and single quotes to prevent attribute-based XSS
2026-07-20 13:13:09 -04:00
hobokenchicken
a5882f32c4
chore: bump to v0.2.9 (version code 2009)
2026-07-20 11:37:26 -04:00
hobokenchicken
4cc6c6f1ed
chore: bump to v0.2.8 (version code 2008)
2026-07-20 10:25:47 -04:00
hobokenchicken
82f329808e
fix(android): replace default icons with dumpster fire logo
2026-07-20 10:12:38 -04:00
hobokenchicken
0ab08a9374
chore: bump to v0.2.7 (version code 2007)
2026-07-20 10:01:32 -04:00
hobokenchicken
974eca4bb2
fix(android): edge-to-edge alignment, keyboard handling, toolbar spacing
2026-07-20 09:49:38 -04:00
hobokenchicken
aa0af5db4f
feat: account deletion in settings + privacy policy with deletion link
2026-07-17 15:47:29 -04:00
hobokenchicken
e79505d8b4
fix(tauri): disable WebKitGTK sandbox inside AppImage on Linux and bump version to 0.2.6
2026-07-16 15:28:36 -04:00
hobokenchicken
b0d820cd92
fix(tauri): set WEBKIT_DISABLE_DMABUF_RENDERER=1 on Linux to prevent white screen
2026-07-16 15:03:10 -04:00
hobokenchicken
57615f5117
fix(voice): broadcast VOICE_JOIN/LEAVE via ws, show participants in sidebar for all users
2026-07-09 12:47:42 -04:00
hobokenchicken
62b8097746
bump: desktop app v0.2.0, build all Linux bundles (appimage, deb, rpm)
2026-07-07 10:20:27 -04:00
hobokenchicken
ca64608e12
ci: Gitea Actions release workflow for Linux + Windows desktop builds
...
Triggers on v* tags. Builds AppImage/deb/rpm on Linux runner,
MSI/NSIS on Windows runner, then creates a release with all assets.
Requires self-hosted runners registered in Gitea Actions.
2026-07-06 14:48:59 -04:00
hobokenchicken
a3064b94ab
feat: Tauri desktop app scaffold
...
- src-tauri/ with Rust backend, Cargo.toml, main.rs, lib.rs
- tauri.conf.json: Linux deb bundle with webkit2gtk deps
- package.json: added tauri script
- Build on a machine with Rust: cd web && npm run tauri build
2026-07-06 18:07:34 +00:00
hobokenchicken