ahmed/anwar-pi-website
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases 3 Wiki Activity
12 Commits 9 Branches 3 Tags
e69e419721068982769dd591d32480d90d88d43f
Commit Graph
12 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ahmed e69e419721 Merge pull request 'Security fixes from pentest 2026-10-09: auth rate limits, timing equalization, HSTS, edge DoS caps' (#1) from security/pentest-fixes-2026-10-09 into main
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
v1.0.0 		2026-10-09 17:01:00 +03:00
AHMED 8e577165cf Security fixes from pentest 2026-10-09 (F1, F2, F4, F7) 
- F2: per-IP rate limits on POST /api/users, /login, /forgot-password
  via new Next middleware (5/h signup, 10/15min login, 5/h forgot);
  429 + Retry-After, generic Arabic error, no UX change
- F7: ghost-email logins burn the same PBKDF2 cost (600k/32/sha256)
  as real verifies, closing response-time user enumeration
- F4: HSTS max-age=63072000; includeSubDomains on all routes
- F1: Traefik pagelimit (60/min, burst 120) + connlimit (in-flight 50)
  on the page router; apilimit untouched
- Pentester accounts (ids 42-48) deleted in prod DB
 2026-10-09 17:00:15 +03:00
AHMED 5ee706ebd6 Audit fixes: VIP self-grant, draft leak, onboarding flag, hero personalization, gated downloads
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-09 16:20:55 +03:00
ahmed c34611dc36 Add responsive signup page
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-03 13:27:10 +03:00
ahmed 9cfffa4c66 Build searchable article library
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-03 02:37:44 +03:00
ahmed 6c8632315f Make featured articles clickable
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-03 02:25:03 +03:00
ahmed a1ba197910 Add footer links to remaining pages
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-03 02:20:31 +03:00
ahmed 2cacdfb926 Add filterable article library
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-03 02:17:46 +03:00
AHMED e10491ad1c Add gstack agent digest
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-02 14:34:29 +03:00
ahmed 5254209f7b Add team about page
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-02 14:06:20 +03:00
ahmed f7460a44b0 Improve project README
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-02 12:48:37 +03:00
ahmed 8fe818e647 Initial site release
Deploy GitHub Pages / deploy (push) Canceled after 0s
Details
2026-10-02 12:46:11 +03:00