3 Commits

Author	SHA1	Message	Date
josh	79adc365d8	server/server.js — added helmet with CSP configured to allow Google Fonts ... Dockerfile — creates a non-root app user and runs the process under it server/routes.js — tailscale_ip validated against IPv4 regex (empty string still allowed) index.html — sql.js CDN script tag already removed earlier in this session	2026-03-28 09:20:24 -04:00
josh	6e40413385	claude went crazy	2026-03-28 02:35:00 -04:00
josh	505315c8bd	adds tests	2026-03-27 23:51:03 -04:00