Linus Rath 30cb676fad fix: write the admin config, password hash and setup token readable only by the app's own user

2026-10-26 11:48:38 +01:00

..

session.ts

fix: stop trusting the unprefixed sidebar-app frame cookie when COOKIE_SECURE=true (GHSA-cjm9-m826-mh78)

2026-10-26 11:48:38 +01:00

state.ts

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

token.ts

fix: write the admin config, password hash and setup token readable only by the app's own user

2026-10-26 11:48:38 +01:00

url-token.ts

fix: keep the setup token out of access logs, referers and history

2026-09-26 16:32:38 +02:00