lerko 8663beeb96 fix: harden API, DB, and web layer from audit findings ...

- Cap list API limit at 200 to prevent unbounded queries
- Sanitize markdown output with DOMPurify to prevent XSS
- Add v4 migration with indexes on deleted_at and modified_at
- Fix v2 migration swallowed ALTER TABLE errors
- Tighten ~/.nib directory permissions to 0o700

2026-05-20 20:41:53 -04:00

..

fonts

feat(ui): self-host fonts, remove Google Fonts CDN

2026-05-16 19:58:11 -04:00

app.js

fix: harden API, DB, and web layer from audit findings

2026-05-20 20:41:53 -04:00

favicon.svg

feat(ui): add favicon (diamond split-tip nib)

2026-05-16 21:24:44 -04:00

fonts.css

feat(ui): self-host fonts, remove Google Fonts CDN

2026-05-16 19:58:11 -04:00

index.html

fix: harden API, DB, and web layer from audit findings

2026-05-20 20:41:53 -04:00

style.css

fix(web): mobile edit via inline fullscreen instead of hidden detail pane

2026-05-20 19:14:02 -04:00