Matthieu MALVACHE 9978b1d407 fix(avatar): proxy favicon lookups so unknown domains fall back to initials ...

DuckDuckGo responds with a 48x48 "no favicon" placeholder (HTTP 404
with an image body) for domains it doesn't have an icon for, and
both Chromium and Firefox fire the img load event for that response
and ignore the status code — so the placeholder was being rendered
as if it were the real favicon.

Route the lookup through a new /api/favicon edge route that fetches
the upstream, checks the status, and returns either the image body
on 200 or a status-only 404 on miss. Now the img element's error
event fires correctly for unknown domains and the avatar falls back
to the initials.

The route validates the domain shape and caches successful responses
for a week on the client. Domain-only lookup preserves the same
privacy posture — the email address never leaves the browser.

2026-04-17 14:19:02 +02:00

..

auth

feat(auth): add "Remember me" session persistence and simplify 2FA UX

2026-02-26 00:45:26 +01:00

config

feat: add OAUTH_ONLY mode to hide basic auth form on login page

2026-03-16 13:07:08 +01:00

favicon

fix(avatar): proxy favicon lookups so unknown domains fall back to initials

2026-04-17 14:19:02 +02:00

health

fix: use v8 heap_size_limit for health check instead of heapTotal (#41)

2026-03-23 12:18:27 +01:00