remco/EpicNext-Cms
1
1 Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
1,785 Commits 2 Branches 14 Tags
1e3406a7ae3d050787bee729cbf7895cf71cb017
Commit Graph
9 Commits
Author SHA1 Message Date
openhands f3407ebfdf fix(imaging): support .hab assets, cache avatars/badges, harden routes
CI / check (push) Successful in 37s
Details
CI / tests-integration (push) Successful in 2m2s
Details
CI / tests-unit (push) Successful in 2m9s
Details
CI / tests-ui (push) Successful in 2m44s
Details
CI / preflight (push) Skipped
Details
CI / deploy (push) Successful in 3m12s
Details 
The hotel moved from .nitro to .hab bundles, so the imager must treat .hab
like .nitro and the public avatar endpoints must accept the figure strings
the client sends (including extra trailing segments such as `.0`, which the
old FIGURE_RE rejected with a 400).

- imager-upstream: relax FIGURE_RE, extend parseAvatarQuery test coverage
- api/imaging/avatar + /imaging: shared validation, placeholder and ETag/304
- api/imaging/badge: single-flight upstream fetch and conditional responses
- imager-http/imager-png: strong ETag helpers and APNG passthrough guard
- csp + next/image: unoptimized external images, tightened CSP
- deps: override postcss-selector-parser to ^7.1.6
- also fold in the pending drizzle draft snapshot and stray test cleanup
 2026-10-14 20:40:50 +02:00
Simo 8abfe352ef fix(security): authorize site uploads and harden tokens, media and request identity
CI / check (push) Successful in 3m15s
Details
CI / deploy (push) Successful in 1m19s
Details
CI / publish-container (push) Successful in 48s
Details
2026-09-13 19:24:43 +02:00
openhands c7fb37356e fix: remove nonce from style-src to allow unsafe-inline to work
CI / check (push) Successful in 29s
Details
CI / release (push) Skipped
Details
CI / deploy (push) Successful in 1m11s
Details
2026-08-01 22:09:22 +02:00
openhands 95b1955218 fix: allow unsafe-inline for styles to fix CSP permanently
CI / check (push) Failing after 31s
Details
CI / release (push) Skipped
Details
CI / deploy (push) Skipped
Details
2026-08-01 21:58:13 +02:00
openhands 0dc16e832d fix: add additional CSP hashes for inline styles
CI / check (push) Successful in 29s
Details
CI / release (push) Skipped
Details
CI / deploy (push) Successful in 1m28s
Details
2026-08-01 21:51:32 +02:00
openhands 59f03827bc fix: add CSP hashes for inline styles from Google Fonts/Tailwind
CI / check (push) Successful in 23s
Details
CI / release (push) Skipped
Details
CI / deploy (push) Successful in 1m12s
Details
2026-08-01 21:46:00 +02:00
openhands 0d6032d444 chore: remove standalone output mode, fix Sentry DSN validation, add dev CSP unsafe-inline for styles
CI / check (push) Successful in 23s
Details
CI / release (push) Skipped
Details
CI / deploy (push) Successful in 1m15s
Details 
- Remove output: 'standalone' from next.config.ts to allow normal 'next start'
- Allow empty SENTRY_DSN/NEXT_PUBLIC_SENTRY_DSN in env validation (zod)
- Add 'unsafe-inline' to style-src CSP only in development for Turbopack HMR
- Clear placeholder Sentry DSN values from .env
 2026-08-01 21:30:51 +02:00
SimoandCursor 2ff08e5127 chore: patch deps, CSP style nonces, otplib 13, and PR CI
Deploy / release (push) Skipped
Details
Deploy / deploy (push) Successful in 1m35s
Details 
Co-authored-by: Cursor <[email protected]>
 2026-07-21 20:46:02 +02:00
SimoandCursor 9b47668fe9 chore: CSP script nonces, deploy health check, dead-code cleanup 
Add per-request CSP nonces (drop script unsafe-inline), post-deploy /api/health gate, bump next-auth to beta.32, and remove unused motion/cache/permission helpers.

Co-authored-by: Cursor <[email protected]>
 2026-07-21 20:27:08 +02:00