josh 79adc365d8 server/server.js — added helmet with CSP configured to allow Google Fonts ...

Dockerfile — creates a non-root app user and runs the process under it
server/routes.js — tailscale_ip validated against IPv4 regex (empty string still allowed)
index.html — sql.js CDN script tag already removed earlier in this session

2026-03-28 09:20:24 -04:00

..

db.js

claude went crazy

2026-03-28 02:35:00 -04:00

routes.js

server/server.js — added helmet with CSP configured to allow Google Fonts

2026-03-28 09:20:24 -04:00

server.js

server/server.js — added helmet with CSP configured to allow Google Fonts

2026-03-28 09:20:24 -04:00