 petrbalvin
|
d26d3b5a5b
|
fix: strip HTML tags from derived excerpt
gsub(/<[^>]+>/, '') before stripping markdown markup, so auto-generated
excerpts don't leak raw HTML from post bodies.
|
2026-06-25 22:06:49 +02:00 |
|
|
petrbalvin
|
4597c685da
|
test: add RSS feed endpoint tests
Verify content type, RSS structure, draft exclusion, and language
element.
|
2026-06-25 21:41:19 +02:00 |
|
|
petrbalvin
|
9dd55adc30
|
fix: add periodic cleanup of login_attempts hash
Sweep stale entries every 5 minutes to prevent unbounded memory growth
from IPs that touch the login endpoint once and never return.
|
2026-06-25 21:40:37 +02:00 |
|
|
petrbalvin
|
140b16b55a
|
feat: add in-memory rate limiting for login endpoint
Rate-limit POST /admin/login at 10 attempts per 60 seconds per IP.
Stored in Volumen.login_attempts so tests can reset the counter.
|
2026-06-25 21:33:16 +02:00 |
|
|
petrbalvin
|
dd3efe870e
|
feat: initial release of volumen — a file-based Markdown blog engine
|
2026-06-21 13:15:06 +02:00 |
|