2 Commits

Author	SHA1	Message	Date
admin	601bdba253	v0.332.0 (live rc.2 + security review): the pass redirect is absolute; no pass for a cross-site request; no dot-segments in to (R-1100)	2026-10-19 05:03:57 +02:00
admin	9bdd8f8fe8	v0.332.0: one sign-in for the file manager — a dashboard pass, a host-only files cookie, a per-box secret header (R-1100, operator D16)	2026-10-19 04:56:56 +02:00