Commits

Commit history

1. Commits on Sep 3, 2026

   • noindex the platform host so it drops out of search results

     Show description for c82d90d
     RespectedPath

     committed
     c82d90dView commit details

     Copy full SHA for c82d90d

     Browse repository at this point
2. Commits on Aug 22, 2026

   • security: serve the docroot from an allowlist, not a deny-list

     Show description for 9f6b0e6
     RespectedPath

     committed
     9f6b0e6View commit details

     Copy full SHA for 9f6b0e6

     Browse repository at this point
3. Commits on Aug 19, 2026

   • feat: hold new bio pages behind a "Coming soon" page

     Show description for 297c255
     RespectedPath

     committed
     297c255View commit details

     Copy full SHA for 297c255

     Browse repository at this point
4. Commits on Aug 13, 2026

   • title: drop the platform suffix and let customers set the tab title

     Show description for ca4dd88
     RespectedPath

     committed
     ca4dd88View commit details

     Copy full SHA for ca4dd88

     Browse repository at this point
5. Commits on Aug 12, 2026

   • favicon: white-label the studio and admin chrome too

     Show description for 0b79ab6
     RespectedPath

     committed
     0b79ab6View commit details

     Copy full SHA for 0b79ab6

     Browse repository at this point

   • favicon: track the favicon-img directory like background-img

     Show description for 2eea126
     RespectedPath

     committed
     2eea126View commit details

     Copy full SHA for 2eea126

     Browse repository at this point

   • favicon: cap uploads at 512KB instead of 2MB

     Show description for 9b0f89c
     RespectedPath

     committed
     9b0f89cView commit details

     Copy full SHA for 9b0f89c

     Browse repository at this point

   • Merge: instant-live editor + version history (no publish step)

     RespectedPath

     committed
     16d1b04View commit details

     Copy full SHA for 16d1b04

     Browse repository at this point

   • editor: instant-live + version history, replacing draft/publish

     Show description for f4b194a
     RespectedPath

     committed
     f4b194aView commit details

     Copy full SHA for f4b194a

     Browse repository at this point
6. Commits on Aug 10, 2026

   • theme-toolkit: render marketing previews at 680px, not 780px

     Show description for 4a6f150
     RespectedPath

     committed
     4a6f150View commit details

     Copy full SHA for 4a6f150

     Browse repository at this point
7. Commits on Aug 7, 2026

   • fix: restore write access to assets/ in the container

     Show description for 1a0fac6
     RespectedPath

     committed
     1a0fac6View commit details

     Copy full SHA for 1a0fac6

     Browse repository at this point

   • Merge: bound input reaching mail headers

     Show description for 12bac81
     RespectedPath

     committed
     12bac81View commit details

     Copy full SHA for 12bac81

     Browse repository at this point

   • security: bound input that reaches mail headers

     Show description for 812924a
     RespectedPath

     committed
     812924aView commit details

     Copy full SHA for 812924a

     Browse repository at this point

   • Merge: session-scoped impersonation (M2)

     Show description for f9de61e
     RespectedPath

     committed
     f9de61eView commit details

     Copy full SHA for f9de61e

     Browse repository at this point

   • security: make impersonation session-scoped instead of a global DB flag

     Show description for 80644f9
     RespectedPath

     committed
     80644f9View commit details

     Copy full SHA for 80644f9

     Browse repository at this point

   • Merge: August 2026 security assessment, medium tier

     Show description for c77e82c
     RespectedPath

     committed
     c77e82cView commit details

     Copy full SHA for c77e82c

     Browse repository at this point

   • security: update dependencies with published advisories

     Show description for b7e84df
     RespectedPath

     committed
     b7e84dfView commit details

     Copy full SHA for b7e84df

     Browse repository at this point

   • security: transport, CORS, SSO replay and container hardening

     Show description for 1ec90dd
     RespectedPath

     committed
     1ec90ddView commit details

     Copy full SHA for 1ec90dd

     Browse repository at this point

   • security: gate public block routes, re-auth credential changes, bound deleteTheme

     Show description for 311634a
     RespectedPath

     committed
     311634aView commit details

     Copy full SHA for 311634a

     Browse repository at this point

   • Merge: August 2026 security assessment fixes

     Show description for 00b490c
     RespectedPath

     committed
     00b490cView commit details

     Copy full SHA for 00b490c

     Browse repository at this point

   • security: validate theme update sources and guard the archive extract

     Show description for 72b987e
     RespectedPath

     committed
     72b987eView commit details

     Copy full SHA for 72b987e

     Browse repository at this point

   • security: escape the impersonation bar and bound the display name

     Show description for 6d29309
     RespectedPath

     committed
     6d29309View commit details

     Copy full SHA for 6d29309

     Browse repository at this point

   • security: require POST for state-changing routes

     Show description for 2ca5a9b
     RespectedPath

     committed
     2ca5a9bView commit details

     Copy full SHA for 2ca5a9b

     Browse repository at this point

   • security: constrain theme names and validate the site-branding uploads

     Show description for edb3c52
     RespectedPath

     committed
     edb3c52View commit details

     Copy full SHA for edb3c52

     Browse repository at this point

   • security: apply the editor's sanitizers to the import path

     Show description for 20626e3
     RespectedPath

     committed
     20626e3View commit details

     Copy full SHA for 20626e3

     Browse repository at this point

   • security: deny direct web access to framework internals

     Show description for 7620af3
     RespectedPath

     committed
     7620af3View commit details

     Copy full SHA for 7620af3

     Browse repository at this point

   • security: gate installer registration on an empty user table

     Show description for 16329b0
     RespectedPath

     committed
     16329b0View commit details

     Copy full SHA for 16329b0

     Browse repository at this point
8. Commits on Aug 6, 2026

   • Merge: stop User::creating from discarding a caller-set id

     Show description for 077566c
     RespectedPath

     committed
     077566cView commit details

     Copy full SHA for 077566c

     Browse repository at this point

   • demo-pages: correct the record on the X icon

     Show description for 2e9f8d4
     RespectedPath

     committed
     2e9f8d4View commit details

     Copy full SHA for 2e9f8d4

     Browse repository at this point

   • demo-pages: emit a thumbnail alongside each full render

     Show description for 996729f
     RespectedPath

     committed
     996729fView commit details

     Copy full SHA for 996729f

     Browse repository at this point

   • fix: stop User::creating from discarding a caller-set id

     Show description for 3acea24
     RespectedPath

     committed
     3acea24View commit details

     Copy full SHA for 3acea24

     Browse repository at this point

   • demo-pages: content for all 47 profession themes

     Show description for c47fa7e
     RespectedPath

     committed
     c47fa7eView commit details

     Copy full SHA for c47fa7e

     Browse repository at this point

   • theme-toolkit: render bio previews from the real page, not a mock

     Show description for 9312f23
     RespectedPath

     committed
     9312f23View commit details

     Copy full SHA for 9312f23

     Browse repository at this point
9. Commits on Aug 3, 2026

   • feat: per-customer browser-tab icon (favicon) for public pages

     Show description for cb61ec1
     RespectedPath

     committed
     cb61ec1View commit details

     Copy full SHA for cb61ec1

     Browse repository at this point
10. Commits on Aug 2, 2026

    • fix: pin text color when a custom background is set but text is untouched

      Show description for 733474a
      RespectedPath

      committed
      733474aView commit details

      Copy full SHA for 733474a

      Browse repository at this point