camagru/src/app, branch master Webcam and upload photo editing web app http://git.tvcloud.fr/cgit.cgi/camagru/atom?h=master 2026-03-22T12:57:45Z Add rate limiting on login and password reset endpoints 2026-03-22T12:57:45Z Thomas Vanbesien tvanbesi@proton.me 2026-03-22T12:57:45Z urn:sha1:94dbb795cc3fe9799d34beb5d6bfa052eba81b0c Track attempts per IP in a rate_limits table with a sliding time window. Login allows 5 failed attempts per 15 min, password reset allows 3 requests per 15 min. Old entries are purged automatically. Add session cookie hardening and Nginx security headers 2026-03-22T12:53:01Z Thomas Vanbesien tvanbesi@proton.me 2026-03-22T12:53:01Z urn:sha1:78e891f06ab94ef478de1c431157f7d634fe4ac8 Set httponly, samesite=Lax, and auto-detected secure flag on session cookies. Add X-Content-Type-Options, X-Frame-Options, and Content-Security-Policy headers in Nginx. Document both in README. Add upload security: size limit, per-user and site-wide post caps 2026-03-22T12:34:47Z Thomas Vanbesien tvanbesi@proton.me 2026-03-22T12:34:47Z urn:sha1:d6a9fd1c32f07b993cb8ecc3c1b7c22f7a0ce848 Reject base64 payloads over 10 MB, limit users to 50 posts each, and cap total posts at 10,000 (~650 MB on disk). Document upload security model in README. Add favicon using webcam.svg 2026-03-22T12:24:50Z Thomas Vanbesien tvanbesi@proton.me 2026-03-22T12:24:18Z urn:sha1:6a2c38dff48529672411419e1f56df0671f40365 Replace home page with redirect to gallery or login 2026-03-21T21:57:36Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T21:57:36Z urn:sha1:6f300d7676aa36903c1a279aeb100d6f4caf1197 Add likes, comments, email notifications, and pagination to gallery 2026-03-21T21:55:13Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T21:55:13Z urn:sha1:f9ad3f4dc05252839457579303a4e0a0f94d8b80 Add user's own posts grid and post deletion to editor page 2026-03-21T21:46:34Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T21:46:34Z urn:sha1:ec77d2f77b96488b1bc170ced2abab12b3c19416 Add editor with webcam/upload capture, overlay compositing, and gallery feed 2026-03-21T21:36:11Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T21:36:11Z urn:sha1:d63e3c91a97d77b202e280ab0fa007dfbe1baa46 Add profile page for editing username, email, password, and notifications 2026-03-21T20:49:57Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T20:49:57Z urn:sha1:f60a390f5c51039fd1efc1df9a6a7f3864ce0062 Add user authentication with email verification and password reset 2026-03-21T20:35:51Z Thomas Vanbesien tvanbesi@proton.me 2026-03-21T20:35:51Z urn:sha1:bc54c8c31e7f50a7a365f9b4d22fe8c74a29f61a Implements registration, login/logout, email verification via token, and password reset flow. Includes CSRF protection, flash messages, MailPit for dev email testing, and security docs in README.