 openhands
|
7412bd2dda
|
Remove outfit selection from register form and fix terms checkbox not toggling
|
2026-07-07 18:53:13 +02:00 |
|
|
openhands
|
9a7b40eae6
|
Add favicon assets, update Nitro v3 script, and update logs
|
2026-07-07 16:04:25 +02:00 |
|
|
openhands
|
5628e7d6b7
|
Security hardening: 12 improvements across the stack
1. env.ts: APP_KEY placeholder detection with validation
2. schema.prisma: password column widened to varchar(255) for argon2id
3. auth.ts: trustHost restricted to development only
4. next.config.ts: added CSP, HSTS, X-Frame-Options, and other security headers
5. api.ts: CORS restricted to APP_URL instead of wildcard
6. register-form.tsx: migrated from REST API fetch to server action (useActionState)
7. twofactor.ts + 2fa page: TOTP recovery codes (8 one-time codes, generated and displayed)
8. register.ts: password min length 8 + complexity requirements (upper, lower, digit)
9. register.ts + help-tickets.ts + radio-shouts.ts: Zod schema validation
10. rate-limit.ts: improved periodic cleanup with aggressive eviction at 10k buckets
11. guard.ts + admin actions: rate-limited admin actions (30 req/min per staff)
12. help-tickets.ts + radio-shouts.ts: content moderation via moderateOrThrow
|
2026-07-04 18:52:00 +02:00 |
|
|
openhands
|
a1950e5b65
|
fix: correct sprite font vertical offset and use avg char width fallback
|
2026-07-03 18:37:05 +02:00 |
|
|
openhands
|
d5ec7ba0f8
|
feat: self-host all Habbo fonts via proxy route /api/font/[style]/[text]
|
2026-07-03 17:21:05 +02:00 |
|
|
openhands
|
f3367e9b7b
|
feat: save logos to media/logo/ subdir, add Logo generator link to admin dropdown
|
2026-07-03 17:14:44 +02:00 |
|
|
openhands
|
6df4fe2ddd
|
chore: remove stale test logos
|
2026-07-03 17:00:41 +02:00 |
|
|
openhands
|
a84cbfa4f0
|
feat: add all 191+ Habbo fonts from habbofont.net to logo generator
|
2026-07-03 16:55:59 +02:00 |
|
|
openhands
|
1b4930af0b
|
chore: add uploaded media files
|
2026-07-02 17:28:24 +02:00 |
|
|
openhands
|
518c072491
|
refactor: convert admin pages to Tailwind and improve media uploads; fix TypeScript error in commandocentrum
|
2026-07-02 17:26:16 +02:00 |
|
 remco
|
f2d13cf644
|
fix: serve uploaded images via /api/media/[name] to avoid Next.js static 404
|
2026-07-01 17:10:43 +02:00 |
|