ad9c556c9aMerge pull request 'Derive uploaded file extension from mimetype, not originalname (fixes#11)' (#18) from fix/upload-extension-xss into mainColby Whitlock2026-07-03 02:44:28 +00:00
e84835a0fbDerive uploaded file extension from mimetype, not originalname (#11)Claude2026-07-02 21:41:56 -05:00
d89cc7e691Merge pull request 'Validate and uniqueness-check username on user update (fixes#13)' (#17) from fix/username-validation-update into mainColby Whitlock2026-07-03 02:39:42 +00:00
43db509293Validate and uniqueness-check username on user update (#13)Claude2026-07-02 21:38:16 -05:00
6b04aa72c1Merge pull request 'Re-validate JWT against the DB in isLoggedIn (fixes#12)' (#16) from fix/stale-jwt-revalidation into mainColby Whitlock2026-07-03 02:32:07 +00:00
81318ae264Merge branch 'main' into fix/stale-jwt-revalidationColby Whitlock2026-07-03 02:31:59 +00:00
853224b578Merge pull request 'Enforce role-based authorization on admin-only routes (fixes#10)' (#15) from fix/role-authorization into mainColby Whitlock2026-07-03 02:31:06 +00:00
8ad18140d0Re-validate JWT against the DB in isLoggedIn (#12)Claude2026-07-02 21:16:43 -05:00
20d7150ab4Enforce role-based authorization on admin-only routes (#10)Claude2026-07-02 21:15:12 -05:00