Catherine Renelle 0852d5a804 Add CSP/HSTS headers, attachment extension whitelist, and upload rate limiting ...

- Add Content-Security-Policy and Strict-Transport-Security headers
- Whitelist allowed file extensions on attachment uploads
- Add rate limiting to password change (5/5min) and file uploads (20/60s)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 19:25:02 -05:00

..

lib

Add CSP/HSTS headers, attachment extension whitelist, and upload rate limiting

2026-03-07 19:25:02 -05:00

routes

Add CSP/HSTS headers, attachment extension whitelist, and upload rate limiting

2026-03-07 19:25:02 -05:00

app.css

Fix dark mode prose text color in card descriptions

2026-02-27 23:21:48 -05:00

app.d.ts

Add 17 features: My Work view, card copy/numbering, calendar, bulk ops, custom fields, automations, webhooks, invites, import/export, and more

2026-02-27 08:50:15 -05:00

app.html

Phase 8: Polish & UX — dark mode, toasts, keyboard shortcuts, responsive, accessibility

2026-02-26 01:09:17 -05:00

hooks.server.ts

Add CSP/HSTS headers, attachment extension whitelist, and upload rate limiting

2026-03-07 19:25:02 -05:00