Commit graph

3 commits

Author SHA1 Message Date
3e64cf0612 Use the same API handle across the entire app
This opens doors in the future to storing state in the API class, and is
just cleaner in general.
2025-03-06 20:26:11 -08:00
bc79be8a96 Add CSRF protection to destructive endpoints
For management endpoints that change server state (restart, ban, etc),
add a referer header check to safeguard against both CSRF and accidental
browser history completion.

Closes #1
2024-12-30 03:18:04 -08:00
c83acbdcfe Reinitialize repo to remove private data
10,000 hours mucking with `git filter-repo` and no reasonable use-case
found. On the plus side, anyone looking at this and curious what I nuked
isn't missing much. This lived in a monorepo up until about a week ago.
2024-12-20 14:45:49 -08:00