Michael/FlowReader
1
0 Fork 0
mirror of https://github.com/R0m1k3/FlowReader.git synced 2026-10-11 17:28:05 +02:00
Code Issues Packages Projects Releases Wiki Activity
100 Commits 7 Branches 0 Tags
3402e53954b5327706955e7199f90b427f6ffd2f
Commit Graph
81 Commits
Author SHA1 Message Date
MichaelandClaude Opus 4.8 3402e53954 sécurité : correctifs XSS, SSRF, CSWSH, rate-limit et durcissement 
- XSS stocké (critique) : sanitisation bluemonday sur tous les endpoints
  d'articles (List, ListByFeed, Favorites, Search, Get), pas seulement Get
- SSRF (élevé) : nouveau utils/safehttp.go (ValidateExternalURL + client durci
  via Dialer.Control, bloque IP privées/loopback/link-local/metadata,
  anti-DNS-rebinding et limite de redirections) appliqué à l'extracteur et au parser
- WebSocket CSWSH (élevé) : politique same-origin + override WS_ALLOWED_ORIGINS
- rate-limiting (moyen) : token-bucket en mémoire sur /auth/*
- token de session retiré du corps JSON (json:"-"), livré uniquement par le
  cookie HttpOnly
- cookie Secure correct derrière un reverse-proxy (X-Forwarded-Proto +
  override COOKIE_SECURE)
- admin : interdiction de supprimer son propre compte
- en-têtes de sécurité (nosniff, X-Frame-Options, Referrer-Policy,
  Permissions-Policy)

Note : backend non compilé localement (pas de toolchain Go) ; à valider via Docker.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-11 13:21:43 +02:00
MichaelandClaude Opus 4.8 10fdfdeccb refonte complète du WebUI (Éditorial Botanique) 
Refonte de toutes les vues en conservant l'identité magazine/vert nature,
avec un système de design cohérent et accessible.

- index.css : tokens sémantiques, échelle radius/ombres, classes réutilisables
  (btn-*, chip, surface-card, magazine-content), :focus-visible,
  prefers-reduced-motion, grain papier affiné
- nouveaux composants AuthShell (auth split-screen) et MobileTopBar
  (navigation mobile, auparavant absente)
- framer-motion sur toutes les vues ; AddFeedModal expose l'import OPML ;
  Sidebar ajoute déconnexion + identité utilisateur
- corrections : text-gold cassé -> nature, arithmétique Date -> getTime(),
  suppression de App.css mort, ProtectedRoute en Tailwind,
  snapshot du deck Focus conforme aux règles React

Frontend : npm run lint + build OK.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-11 13:21:23 +02:00
Michael 2a8b5664c5 chore: update vite to version 7.3.1 and add overrides for dependencies 2026-04-03 09:42:38 +02:00
Antigravity Agent 3a7f7787df feat: implement DashboardPage with infinite scrolling, search, and article management features 2026-03-31 19:48:13 +02:00
Michael 908d907629 feat(ux): implement masonry dashboard layout and immersive focus mode 2026-02-18 11:48:17 +01:00
Michael 02c3c333cf fix(share): resolve typescript errors in ReaderView and ShareButton 2026-02-13 09:02:31 +01:00
Michael 8279df02d3 feat(share): integrate share button in reader views and fix types 2026-02-13 09:02:16 +01:00
Michael d56db26378 feat(share): add native share button with fallback menu 2026-02-13 09:01:44 +01:00
Michael d282d80add refactor(focus): isolate card drag state to fix rebound forever 2026-02-13 08:48:38 +01:00
Michael b04dc992d9 fix(focus): prevent card rebound on swipe release by freezing exit position 2026-02-13 08:41:56 +01:00
Michael 9d41a74b36 feat(ux): fix focus swipe animation, button visibility and mobile scroll 2026-02-13 08:35:13 +01:00
Michael 22e002f47f feat(focus): fix drag vs open and unify button design 2026-02-13 08:17:53 +01:00
Michael dfa56173b9 Fix double swipe/validation in Focus Mode & Improve Button Layout 2026-02-12 13:18:58 +01:00
Michael c350ca4893 Fix Focus Mode Undo Button visibility and layout 2026-02-12 13:16:10 +01:00
Michael 803b51193a Standardize Focus Mode Article View & Fix UI 2026-02-12 13:10:51 +01:00
Michael 5f149c8e64 feat(ui): compact dashboard widget and improve focus exit button 2026-02-12 12:52:42 +01:00
Michael a79731b563 feat(focus): add undo button to go back to previous card 2026-02-12 12:51:35 +01:00
Michael d11068b3df fix(focus): solve double swipe skip by stabilizing deck state 2026-02-12 12:49:53 +01:00
Michael 679722cc13 fix(ci): add @tailwindcss/oxide-linux-x64-musl to optionalDependencies 2026-02-12 12:36:06 +01:00
Michael 9495400b50 fix(ci): add lightningcss-linux-x64-musl to optionalDependencies 2026-02-12 12:34:21 +01:00
Michael 28cd42f207 fix(build): migrate to @tailwindcss/vite and remove conflicting postcss config 2026-02-12 12:32:41 +01:00
Michael 43f011e3a6 fix(ci): add rollup-linux-x64-musl optional dep for docker build 2026-02-12 12:00:08 +01:00
Michael 04a76795a4 Merge branch 'main' of https://github.com/R0m1k3/FlowReader 
# Conflicts:
#	web/package-lock.json
 2026-02-12 11:57:42 +01:00
Michael a512173f05 feat: implement Focus Mode (Speed Read) with swipeable card deck 2026-02-12 11:56:16 +01:00
Michael 171c7dcd20 style: update mobile close button to green background with black icon 2026-02-09 14:11:06 +01:00
Michael 1e5593c299 fix: relocate mobile close button to top-right to prevent overlap 2026-02-09 13:38:20 +01:00
Michael 4200926d7b feat: finalize UI/UX for AI Summary (rename to Résumé), fix generation button, and mark cleanup task done 2026-02-09 13:03:23 +01:00
Michael c4cc7eaf87 feat: auto-cleanup articles > 30d and relocate AI summary to reader view 2026-02-09 11:49:54 +01:00
Michael eb2c938a2a style: restore premium paper look and deep shadows on article cards 2026-02-09 10:24:53 +01:00
Michael 21bd917ab7 style: restore deep black shadow on article cards 2026-02-09 10:21:15 +01:00
Michael 5b219cf0e7 feat(ia): implement Smart Digest and fix UI alignment 2026-02-09 10:06:13 +01:00
Michael 7e802df2a7 feat: implement Deep Forest dark mode, swipe gestures, PWA support, and PostgreSQL Full-Text Search 2026-02-09 09:18:40 +01:00
Michael 3e468d8885 style(web): improve ArticleCard UX and add Back to Top button 2026-02-06 15:28:24 +01:00
Michael b0df24011c feat(web): implement infinite scroll, improve article title readability, and update favicon 2026-02-06 15:20:46 +01:00
Michael bee0d901f7 style: align feed title with review pill style 2026-02-05 15:56:22 +01:00
Michael 648466dde2 style: fix mobile back button contrast and remove article image gradient 2026-02-05 15:44:00 +01:00
Michael 0f5aa18efe style: fix mobile layout, sidebar contrast, and button hover states 2026-02-05 15:35:43 +01:00
Michael 9030b7d010 fix: install tailwindcss-animate to resolve missing mobile view animations 2026-02-05 15:22:44 +01:00
Michael 8693f4ce1b style: enhance background noise opacity and harmonise sidebar color 2026-02-05 15:13:49 +01:00
Michael dcdd2cc11f feat(mobile): add swipe navigation and warm newspaper styling 2026-02-05 14:33:46 +01:00
Michael d2b755bf28 feat(ui): add warm newspaper background texture and adjust base color 2026-02-05 11:01:09 +01:00
Michael 15cc1e4588 fix(ui): improve update button hover contrast 2026-02-05 10:58:10 +01:00
Michael e3c2e02e2f fix(ui): adjust gradient, button spacing, feed title persistence, and optimistic read status 2026-02-05 10:51:31 +01:00
Michael 5e73018e31 fix(ui): adjust card gradient, align buttons, and add read-on-open logic 2026-02-05 10:35:52 +01:00
Michael b5aa076751 fix(ui): add white gradient to cards and improve text contrast 2026-02-05 10:23:43 +01:00
Michael d2e344a98b fix(ui): update ribbon text and fix button hover visibility 2026-02-05 10:21:51 +01:00
Michael 200bd63335 fix(ui): resolve sidebar syntax error and improve ribbon contrast 2026-02-05 10:11:37 +01:00
Michael 352768aad7 feat(ui): implement organic warmth premium theme 2026-02-05 10:02:38 +01:00
Antigravity Agent f391155da5 feat(ui): add favorites view and navigation 2026-02-04 22:31:40 +01:00
Antigravity Agent 031962d811 fix(ui): remove unwanted gold bar from article reader view 2026-02-04 22:28:43 +01:00