9aeed2af50
security: remove config.json from tracking, add example configs and nginx guard
...
- config.json now in .gitignore — it contained admin password hash and
secret_key placeholder which should never be in version control
- Add config.example.json as a safe, secrets-free template for new deployments
- Add nginx.conf.example with proper reverse-proxy guards:
- Static files served by Nginx directly (not Flask)
- Explicit deny on .py, .json, .db, .log, .env and other sensitive extensions
- Block dot-files and __pycache__ paths
- No directory listing (autoindex off)
- HTTPS enforcement with HSTS
2026-05-16 12:20:01 +01:00
ComputerTech
24d70aeb08
feat: scrollable view layout, discussions extend page, word wrap toggle, divider-style comments
2026-04-06 21:10:14 +01:00
ComputerTech
89e194a435
feat: discussions (comments) on pastes with optional nickname and E2E encryption
2026-04-06 20:50:07 +01:00
ComputerTech
c8d78c7d61
fix: clicking highlighted line number clears the highlight
2026-04-06 19:50:10 +01:00
ComputerTech
f93d232769
feat: GitHub-style line linking (?L=5 or ?L=5-12)
2026-04-06 19:46:16 +01:00
ComputerTech
be6b102d16
fix: self-heal rate_limits table if missing (pre-migration DBs)
2026-04-06 19:24:52 +01:00
ComputerTech
cc9b184277
fix: call init_db() at module level so rate_limits table is created under gunicorn
2026-04-06 19:18:28 +01:00
ComputerTech
636d4c919e
fix: line numbers button for plain text and initial render
2026-04-06 18:00:46 +01:00
ComputerTech
4199090913
Fix AttributeError in production.py's stop/status commands
2026-03-31 12:30:13 +01:00
ComputerTech
2977bfffb1
Show JSON decoding errors in production.py
2026-03-31 12:23:10 +01:00
ComputerTech
af4ac1287c
Fix port precedence: respect config.json over hardcoded defaults
2026-03-31 12:21:31 +01:00
ComputerTech
a35c60ce63
Improve production.py robustness with orphan detection and kill command
2026-03-31 12:19:09 +01:00
ComputerTech
8365b38673
Implement user deletion tokens, admin panel, and security hardening
2026-03-31 12:05:06 +01:00
ComputerTech
cdbd700c2e
Allow configuring paste ID and encryption key lengths in config.json
2026-03-28 01:15:14 +00:00
ComputerTech
f8cc163ba9
Switch to AES-128 for shorter decryption keys in URLs (backwards compatible)
2026-03-28 01:08:21 +00:00
ComputerTech
7803f97714
Make expiry options dynamic in index.html
2026-03-28 01:01:26 +00:00
ComputerTech
a46cba7143
Remove 'Never' expiry (1-year max) and fix Raw blob URL issue
2026-03-28 01:00:52 +00:00
ComputerTech
d0289f85d5
Add missing CSP nonces to scripts; fix Nginx static path for remote server
2026-03-27 16:14:17 +00:00
ComputerTech
3e724a5974
Allow production.py to load site config; update default port to 5500
2026-03-27 16:12:08 +00:00
ComputerTech
53b908e651
Fix the clear button and improve rate limiting
2026-03-27 16:04:26 +00:00
ComputerTech
0bb85da6bb
Comprehensive security & reliability audit: hardened CSP, fixed vulnerabilities, improved theme management, and added line numbers toggle.
2026-03-27 15:22:53 +00:00
ComputerTech
6d05b40021
Fix: UTC expiry, ID-collision retry, init_db leak, view_paste race, debug warning, Prism SRI hashes
2026-03-27 12:16:03 +00:00
ComputerTech
8339d0f2d9
Security: headers, input validation, db connection safety
2026-03-27 01:30:48 +00:00
ComputerTech
89a7c33adb
Fix plaintext POST pastes rendering without encryption key
2026-03-26 21:27:52 +00:00
ComputerTech
14be14e437
Initial commit — Bastebin
2026-03-26 14:44:36 +00:00
Antigravity
ComputerTech