Sami 52577b11ed Fix 7 frontend security vulnerabilities (4 critical, 3 high) ...

- Escape all innerHTML assignments with user/external data across 12 JS files
- Upgrade credential encryption: per-value IV, key moved to sessionStorage
- Fix open redirect in TOTP auth via proper URL hostname validation
- Remove sensitive DNS topology data from localStorage cache
- Add security regression test suite (51 tests)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 01:29:04 -08:00

..

api

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

assets

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

css

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

js

Fix 7 frontend security vulnerabilities (4 critical, 3 high)

2026-03-07 01:29:04 -08:00

apps.json

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

build.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

help-errors.html

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

index.html

Add subdirectory routing mode for public domain deployments

2026-03-06 03:03:17 -08:00

jsconfig.json

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

monitoring-dashboard.html

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

package-lock.json

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

package.json

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

sw.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00