josh 79adc365d8 server/server.js — added helmet with CSP configured to allow Google Fonts ...

Dockerfile — creates a non-root app user and runs the process under it
server/routes.js — tailscale_ip validated against IPv4 regex (empty string still allowed)
index.html — sql.js CDN script tag already removed earlier in this session

2026-03-28 09:20:24 -04:00

7.3 KiB

Raw Permalink Blame History

View Raw