volumen

33 Commits 2 Branches 6 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
petrbalvin	a2f42c6a12	security: add Content-Security-Policy header for admin routes Set a strict CSP on all /admin/* responses: default-src 'self', script/style 'unsafe-inline' (needed for the inline editor JS and layout CSS), img-src 'self' data:, frame-ancestors 'none'. Public API routes are unaffected. Bump ClassLength limit to 420 to accommodate the new helper.	2026-06-26 20:41:10 +02:00
petrbalvin	b2b8156648	refactor: split Server into api_routes and admin_routes modules Keep server.rb focused on configuration, session setup, and shared helpers. Extract route definitions into registered Sinatra extension modules. Exclude the registered methods from AbcSize/MethodLength metrics — large registered methods are the idiomatic Sinatra pattern.	2026-06-25 21:35:07 +02:00
petrbalvin	dd3efe870e	feat: initial release of volumen — a file-based Markdown blog engine	2026-06-21 13:15:06 +02:00

Author

SHA1

Message

Date

petrbalvin

a2f42c6a12

security: add Content-Security-Policy header for admin routes

Set a strict CSP on all /admin/* responses: default-src 'self',
script/style 'unsafe-inline' (needed for the inline editor JS and
layout CSS), img-src 'self' data:, frame-ancestors 'none'. Public
API routes are unaffected. Bump ClassLength limit to 420 to
accommodate the new helper.

2026-06-26 20:41:10 +02:00

petrbalvin

b2b8156648

refactor: split Server into api_routes and admin_routes modules

Keep server.rb focused on configuration, session setup, and shared
helpers. Extract route definitions into registered Sinatra extension
modules. Exclude the registered methods from AbcSize/MethodLength
metrics — large registered methods are the idiomatic Sinatra pattern.

2026-06-25 21:35:07 +02:00

petrbalvin

dd3efe870e

feat: initial release of volumen — a file-based Markdown blog engine

2026-06-21 13:15:06 +02:00