| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | fix(security): allow media-src in CSP for external video | Fuwn | 20 hours | 1 | -0/+1 |
| | | | | | | | | Static source sweep found a <video> on the home page (rendered when a user disables all content sections) sourced from video.twimg.com. media-src was unset, so it fell back to default-src 'self' and would be blocked. Add media-src 'self' data: blob: https' (matching img-src). | ||||
| * | feat(security): add Content-Security-Policy | Fuwn | 21 hours | 1 | -0/+23 |
| | | | | | | | | | | | | No CSP existed, leaving the app without defense-in-depth against XSS. Add a SvelteKit nonce-based policy (mode: auto): script-src limited to self + per-request nonce + the analytics/Vercel script hosts, object-src none, base-uri and frame-ancestors self. img/style/font/connect stay permissive (https:) so the image proxy, CDNs, fonts and the many cross-origin API calls keep working; the two inline app.html scripts carry %sveltekit.nonce%. Verified in-browser across routes (no violations, HMR and hydration intact) and via a production build. | ||||
| * | chore(biome): drop formatter style overrides | Fuwn | 2026-03-01 | 1 | -13/+13 |
| | | |||||
| * | deps(svelte): Migrate to Svelte 5 with compatibility mode | Fuwn | 2026-01-22 | 1 | -1/+1 |
| | | |||||
| * | deps(sveltekit): Migrate to SvelteKit 2 | Fuwn | 2026-01-22 | 1 | -1/+1 |
| | | |||||
| * | refactor(configuration): Replace svelte-preprocess with vitePrepreocess | Fuwn | 2026-01-22 | 1 | -10/+1 |
| | | |||||
| * | deps: Revert to commit 731733e | Fuwn | 2025-12-01 | 1 | -1/+1 |
| | | |||||
| * | deps(SvelteKit): Migrate to SvelteKit 2 | Fuwn | 2025-06-09 | 1 | -1/+1 |
| | | |||||
| * | chore(prettier): use spaces instead of tabs | Fuwn | 2024-10-09 | 1 | -18/+18 |
| | | |||||
| * | feat(api): set up graphql api | Fuwn | 2024-09-28 | 1 | -1/+3 |
| | | |||||
| * | feat(girls): hoverable images | Fuwn | 2024-03-03 | 1 | -1/+2 |
| | | |||||
| * | chore(svelte): replace configuration interface | Fuwn | 2024-02-11 | 1 | -1/+2 |
| | | |||||
| * | ci(vercel): unpin nodejs | Fuwn | 2024-01-31 | 1 | -1/+0 |
| | | |||||
| * | ci(vercel): pin nodejs 18.x | Fuwn | 2024-01-31 | 1 | -1/+1 |
| | | |||||
| * | ci(vercel): use vercel configuration | Fuwn | 2024-01-31 | 1 | -2/+4 |
| | | |||||
| * | feat(css): autoprefixer | Fuwn | 2024-01-12 | 1 | -1/+10 |
| | | |||||
| * | revert: "deps(svelte): update to kit 2" | Fuwn | 2024-01-06 | 1 | -1/+1 |
| | | | | | This reverts commit c3645de38878fa2e02d47d4c299aa033895347cf. | ||||
| * | deps(svelte): update to kit 2 | Fuwn | 2024-01-06 | 1 | -1/+1 |
| | | |||||
| * | ci: move to vercel | Fuwn | 2024-01-03 | 1 | -1/+1 |
| | | |||||
| * | chore(svelte): alias stores | Fuwn | 2023-12-31 | 1 | -1/+6 |
| | | |||||
| * | refactor(svelte): remove old config docs | Fuwn | 2023-11-06 | 1 | -9/+1 |
| | | |||||
| * | ci(docker): fix bun version | Fuwn | 2023-08-30 | 1 | -6/+1 |
| | | |||||
| * | ci(docker): use bun through and through | Fuwn | 2023-08-30 | 1 | -2/+7 |
| | | |||||
| * | feat(svelte): remove adapter | Fuwn | 2023-08-27 | 1 | -1/+1 |
| | | |||||
| * | feat: initial build | Fuwn | 2023-08-26 | 1 | -0/+18 |