admin 02650e3202 v0.23.0 — CSRF protection on all browser-facing POST endpoints ...

Controller:
- internal/web/csrf.go (new): CsrfProtect middleware, csrfToken/csrfField helpers
- auth.go: per-session CSRF token (csrfToken field, csrfTokenForSession method)
- server.go: executeTemplate wrapper auto-injects CSRFField+CSRFToken
- main.go: wire CsrfProtect on all routes; bump to v0.23.0
- handlers.go, storage_handlers.go, handler_restore.go: executeTemplate
- All templates: CSRFField in forms, meta csrf-token, csrfHeaders() JS helper,
  fetch calls updated; sendBeacon→fetch+keepalive in storage_attach.html

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-02-21 16:38:56 +01:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

controller

v0.23.0 — CSRF protection on all browser-facing POST endpoints

2026-02-21 16:38:56 +01:00

docs

updated SSH executable details

2026-02-18 08:36:12 +01:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

v0.22.1: Fix setup wizard bugs (detection, CSRF panic, version display, IP)

2026-02-21 13:30:32 +01:00

BUGHUNT.md

Fix bugs from BUGHUNT.md: restore race conditions, infra backup, DR wiring, docker-setup.sh, restore.html

2026-02-19 14:06:42 +01:00

CHANGELOG.md

v0.23.0 — CSRF protection on all browser-facing POST endpoints

2026-02-21 16:38:56 +01:00

CLAUDE.md

updated CLAUDE.md

2026-02-20 11:09:52 +01:00

CONTEXT.md

docs: update CHANGELOG.md and CONTEXT.md for v0.16.1 + hub v0.1.8

2026-02-19 18:29:41 +01:00

TASK.md

v0.23.0 — CSRF protection on all browser-facing POST endpoints

2026-02-21 16:38:56 +01:00

S

Description

No description provided

12 MiB

Languages

Go 66.8%

HTML 22.8%

Shell 5.7%

CSS 4.3%

Dockerfile 0.2%

Other 0.2%