hobokenchicken
978e94da90
fix(android): bump safe-top to 2rem, enlarge toolbar icons, fix login spacing
...
- --safe-top: 1.5rem → 2rem for extra status bar clearance
- Formatting toolbar: w-3→w-4, p-1→p-1.5 for better touch targets
- Login form: increased vertical spacing between buttons, text-xs on passkey
2026-07-21 09:58:02 -04:00
hobokenchicken
57aec2c6b3
sec: hash tokens in DB, set Tauri CSP, escape quotes in XSS guard
...
- Session and email verification/reset tokens stored as SHA-256 hash in DB
(raw token stays client-side in cookie/email link)
- Tauri CSP set: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline';
img-src 'self' data: https:; connect-src 'self' wss: https:
- escapeHtml now handles double and single quotes to prevent attribute-based XSS
2026-07-20 13:13:09 -04:00
hobokenchicken
974eca4bb2
fix(android): edge-to-edge alignment, keyboard handling, toolbar spacing
2026-07-20 09:49:38 -04:00
hobokenchicken
64df016f3f
feat(ui): character counter in message compose box
2026-07-09 16:00:28 -04:00
hobokenchicken
2f55521187
fix(ui): textarea auto-expands instead of scrolling
2026-07-09 15:55:00 -04:00
hobokenchicken
c8151c6e38
change upload limit from 25MB to 1GB
2026-07-07 13:43:41 +00:00
hobokenchicken
cb4df31f43
fix: DM message ordering, consolidate input toolbar, add rich text/WYSIWYG, file upload with drag-drop
...
- Fix DM backend ListMessages to use DESC + reverse (match channel handler)
- Remove spurious .reverse() from frontend message/conversation stores
- Create shared MessageInput component with Slack-style single toolbar row
- Add file upload via + button with progress bar and drag-and-drop
- Add markdown/rich text toggle with full WYSIWYG block formatting
(lists, blockquotes, links, headings, code blocks)
- Add frontend+backend security for file uploads (extension + content-type guards)
2026-07-06 17:33:20 +00:00