Colby Whitlock

whitlocktech deleted branch feature/admin-login-hardening from RunicGateway/website

2026-07-03 05:56:35 +00:00

whitlocktech deleted branch fix/jwt-secret-fail-fast from RunicGateway/website

2026-07-03 05:56:34 +00:00

whitlocktech closed pull request RunicGateway/website#21

2026-07-03 05:56:34 +00:00

Fail fast when JWT_SECRET is missing in production (closes #14)

whitlocktech deleted branch feature/configurable-moon-image from RunicGateway/website

2026-07-03 05:56:31 +00:00

whitlocktech closed issue RunicGateway/website#5

2026-07-03 04:45:27 +00:00

Hero button bug

whitlocktech pushed to main at RunicGateway/website

2026-07-03 04:45:27 +00:00

f305019c54 Merge pull request 'Make the hero Moon image configurable (src/alt), backwards-compatible' (#20) from feature/configurable-moon-image into main

7e8ffeee6f Raise hero upload soft-warning from 1 MB to 5 MB

6ab3e47d38 Make the hero Moon image configurable via props.src

Compare 3 commits »

whitlocktech merged pull request RunicGateway/website#20

2026-07-03 04:45:26 +00:00

Make the hero Moon image configurable (src/alt), backwards-compatible

whitlocktech reopened pull request RunicGateway/website#20

2026-07-03 04:45:14 +00:00

Make the hero Moon image configurable (src/alt), backwards-compatible

whitlocktech closed pull request RunicGateway/website#20

2026-07-03 04:44:33 +00:00

Make the hero Moon image configurable (src/alt), backwards-compatible

whitlocktech approved RunicGateway/website#20

2026-07-03 04:43:29 +00:00

Make the hero Moon image configurable (src/alt), backwards-compatible

whitlocktech closed issue RunicGateway/website#9

2026-07-03 04:27:53 +00:00

Admin path security

whitlocktech pushed to main at RunicGateway/website

2026-07-03 04:27:53 +00:00

ea46b5d346 Merge pull request 'Admin login hardening: RBAC-safe controls, optional TOTP, bot-scoring + IP ban (closes #9)' (#19) from feature/admin-login-hardening into main

d38c98ad9e Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

Compare 2 commits »

whitlocktech merged pull request RunicGateway/website#19

2026-07-03 04:27:52 +00:00

Admin login hardening: RBAC-safe controls, optional TOTP, bot-scoring + IP ban (closes #9)

whitlocktech approved RunicGateway/website#19

2026-07-03 04:27:46 +00:00

Admin login hardening: RBAC-safe controls, optional TOTP, bot-scoring + IP ban (closes #9)

whitlocktech merged pull request RunicGateway/website#18

2026-07-03 02:44:30 +00:00

Derive uploaded file extension from mimetype, not originalname (fixes #11)

whitlocktech closed issue RunicGateway/website#11

2026-07-03 02:44:30 +00:00

[Security][High] Uploaded file extension is attacker-controlled → stored XSS

whitlocktech pushed to main at RunicGateway/website

2026-07-03 02:44:30 +00:00

ad9c556c9a Merge pull request 'Derive uploaded file extension from mimetype, not originalname (fixes #11)' (#18) from fix/upload-extension-xss into main

e84835a0fb Derive uploaded file extension from mimetype, not originalname (#11)

Compare 2 commits »

whitlocktech approved RunicGateway/website#18

2026-07-03 02:44:23 +00:00

Derive uploaded file extension from mimetype, not originalname (fixes #11)

whitlocktech pushed to main at RunicGateway/website

2026-07-03 02:39:46 +00:00

d89cc7e691 Merge pull request 'Validate and uniqueness-check username on user update (fixes #13)' (#17) from fix/username-validation-update into main

43db509293 Validate and uniqueness-check username on user update (#13)

Compare 2 commits »

whitlocktech closed issue RunicGateway/website#13

2026-07-03 02:39:44 +00:00

[Bug][Medium] username unvalidated and not uniqueness-checked on user update