dumpsterChat

Files

T

hobokenchicken 57aec2c6b3 sec: hash tokens in DB, set Tauri CSP, escape quotes in XSS guard

- Session and email verification/reset tokens stored as SHA-256 hash in DB
  (raw token stays client-side in cookie/email link)
- Tauri CSP set: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline';
  img-src 'self' data: https:; connect-src 'self' wss: https:
- escapeHtml now handles double and single quotes to prevent attribute-based XSS

2026-07-20 13:13:09 -04:00

capabilities

feat: Tauri desktop app scaffold

2026-07-06 18:07:34 +00:00

gen/android

fix(android): replace default icons with dumpster fire logo

2026-07-20 10:12:38 -04:00

icons

feat: Tauri desktop app scaffold

2026-07-06 18:07:34 +00:00

src

fix(tauri): disable WebKitGTK sandbox inside AppImage on Linux and bump version to 0.2.6