| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | fix(security): sanitize badge_wall_css server-side, render via textContent | Fuwn | 20 hours | 1 | -1/+2 |
| | | | | | | | | | | | | | | | | | Custom badge-wall CSS was sanitised only client-side with a fragile regex and injected via innerHTML, while the stored value stayed raw. Sanitise at the write boundary instead (setCSS, covering both the REST and GraphQL paths) with a css-tree pass that parses leniently and drops @import, behavior/-moz-binding, expression()/javascript: values, and </style> break-out attempts; render with textContent instead of innerHTML so break-out is impossible by construction (CSP already blocks inline script). css-tree stays server-only. A behaviour-gate test confirms ordinary CSS (backdrop-filter, content, url(), @media, @keyframes) is preserved while the dangerous constructs are removed. The previous regex also silently stripped all `content:` declarations; those now render correctly. | ||||
| * | style: apply biome autofixes and resolve remaining lint findings | Fuwn | 4 days | 2 | -2/+2 |
| | | | | | | | | | | | | | | | Auto-fixed cosmetic findings (import ordering, obj["k"]->obj.k, optional chaining, template literals, Date.now, parseInt radix, useless ternaries/ switch cases). Resolved the non-autofixable rest by hand: - Senpy: static-only class -> object literal (no this/static reliance). - app.html: var global shim -> window.global = window (keeps the shim, drops the unused-var flag). - biome-ignore with rationale for the logout document.cookie clear and the holodule scrape non-null assertion. Verified: biome check 0 diagnostics, svelte-check 0/0, 24/24 unit tests. | ||||
| * | fix(notifications): support per-device push subscriptions | Fuwn | 2026-03-28 | 1 | -3/+38 |
| | | |||||
| * | fix(preferences): preserve partial preference updates | Fuwn | 2026-03-28 | 1 | -44/+26 |
| | | |||||
| * | style(ci): format supabase server client | Fuwn | 2026-03-27 | 1 | -1/+2 |
| | | |||||
| * | fix(ci): fall back to anon key during build analysis | Fuwn | 2026-03-27 | 1 | -1/+6 |
| | | |||||
| * | fix(supabase): use dynamic private env for service role | Fuwn | 2026-03-27 | 1 | -2/+2 |
| | | |||||
| * | refactor(supabase): move app access to service role | Fuwn | 2026-03-27 | 9 | -14/+19 |
| | | |||||
| * | chore(format): normalise user badges store formatting | Fuwn | 2026-03-01 | 1 | -12/+10 |
| | | |||||
| * | chore(biome): drop formatter style overrides | Fuwn | 2026-03-01 | 12 | -384/+480 |
| | | |||||
| * | chore(biome): re-enable noImplicitAnyLet rule | Fuwn | 2026-03-01 | 1 | -1/+2 |
| | | |||||
| * | refactor(lib): Migrate simple components to Svelte 5 runes syntax | Fuwn | 2026-01-23 | 1 | -1/+1 |
| | | |||||
| * | refactor(Database:User): Align Badge interface with database schema | Fuwn | 2026-01-23 | 1 | -5/+16 |
| | | |||||
| * | feat(graphql): paged badges query | Fuwn | 2024-10-18 | 2 | -3/+14 |
| | | |||||
| * | feat(tools): add simple tracker | Fuwn | 2024-10-12 | 1 | -0/+23 |
| | | |||||
| * | chore(prettier): use spaces instead of tabs | Fuwn | 2024-10-09 | 10 | -250/+250 |
| | | |||||
| * | feat(badges): move badge operations to graphql | Fuwn | 2024-10-06 | 1 | -76/+72 |
| | | |||||
| * | feat(notifications): fingerprint for multiple grants | Fuwn | 2024-08-24 | 1 | -4/+10 |
| | | |||||
| * | refactor(Data): rename database references | Fuwn | 2024-08-24 | 11 | -48/+42 |
| | | |||||
| * | refactor(Database): move Supabase user modules to User module | Fuwn | 2024-07-25 | 4 | -4/+4 |
| | | |||||
| * | refactor(Database): separate providers | Fuwn | 2024-07-25 | 10 | -8/+8 |
| | | |||||
| * | feat(notifications): allow unsubscribe | Fuwn | 2024-07-25 | 1 | -0/+3 |
| | | |||||
| * | feat: background notifications | Fuwn | 2024-07-24 | 2 | -0/+52 |
| | | |||||
| * | fix(supabase): use svelte environment | Fuwn | 2024-06-13 | 1 | -4/+2 |
| | | |||||
| * | feat(badges): click counter for badges | Fuwn | 2024-05-27 | 1 | -0/+4 |
| | | |||||
| * | fix(match): delayed and subtitled time compatibility | Fuwn | 2024-05-24 | 1 | -66/+70 |
| | | |||||
| * | feat(badges): individual badges shadow hiding | Fuwn | 2024-05-20 | 1 | -65/+68 |
| | | |||||
| * | feat(badges): use array for pinned categories | Fuwn | 2024-05-05 | 1 | -5/+5 |
| | | |||||
| * | feat(user): drag and drop pinned categories | Fuwn | 2024-05-05 | 1 | -0/+14 |
| | | |||||
| * | feat(user): pinned category ui | Fuwn | 2024-05-04 | 1 | -3/+24 |
| | | |||||
| * | feat(badges): pinned categories | Fuwn | 2024-05-04 | 1 | -1/+5 |
| | | |||||
| * | feat(badges): allow awc badges hiding | Fuwn | 2024-04-28 | 1 | -1/+13 |
| | | |||||
| * | feat(badges): admin shadow hide | Fuwn | 2024-04-19 | 1 | -1/+5 |
| | | |||||
| * | fix(preferences): allow empty biography | Fuwn | 2024-04-18 | 1 | -1/+1 |
| | | |||||
| * | fix(preferences): allow empty css | Fuwn | 2024-04-18 | 1 | -1/+3 |
| | | |||||
| * | fix(badges): empty fields | Fuwn | 2024-04-15 | 1 | -18/+16 |
| | | |||||
| * | feat(badges): source and designer fields | Fuwn | 2024-04-15 | 1 | -4/+18 |
| | | |||||
| * | feat(badges): badge hiding | Fuwn | 2024-04-13 | 1 | -4/+6 |
| | | |||||
| * | feat(user): biography option | Fuwn | 2024-04-13 | 1 | -1/+14 |
| | | |||||
| * | feat(badges): custom css | Fuwn | 2024-04-02 | 1 | -1/+16 |
| | | |||||
| * | feat(user): biography | Fuwn | 2024-03-20 | 1 | -1/+3 |
| | | |||||
| * | feat(badges): migrate category mode | Fuwn | 2024-03-01 | 1 | -0/+7 |
| | | |||||
| * | fix(preferences): add preferences when not set | Fuwn | 2024-02-18 | 1 | -4/+2 |
| | | |||||
| * | feat(badges): optionally hide missing badges | Fuwn | 2024-02-17 | 1 | -0/+12 |
| | | |||||
| * | fix(preferences): return preferences | Fuwn | 2024-02-17 | 1 | -1/+1 |
| | | |||||
| * | feat(hololive): move pinned to preferences | Fuwn | 2024-02-17 | 2 | -25/+64 |
| | | |||||
| * | feat(events): avatar for all events | Fuwn | 2024-02-17 | 1 | -2/+3 |
| | | |||||
| * | feat(settings): delete remote configuration | Fuwn | 2024-02-17 | 1 | -0/+8 |
| | | |||||
| * | feat(hololive): stream pinning | Fuwn | 2024-02-15 | 1 | -3/+27 |
| | | |||||
| * | feat(group): show events | Fuwn | 2024-02-13 | 1 | -6/+13 |
| | | |||||