SaelixCode 50df5b3c02 fix(security): explicitly disable upgrade-insecure-requests via Helmet 8 API ...

Helmet 8 merges custom directives with its built-in defaults, which
include upgrade-insecure-requests. Simply omitting the directive from
the custom object (PR #59) was insufficient — Helmet silently re-adds
it from defaults. Setting upgradeInsecureRequests: null is the correct
Helmet 8 API to remove a default directive.

This was the root cause of the persistent blank page on plain-HTTP
self-hosted deployments: the directive tells browsers to upgrade all
HTTP sub-resource fetches to HTTPS, producing ERR_SSL_PROTOCOL_ERROR
on every JS/CSS asset.

2026-03-22 17:26:08 -04:00

..

public

feat: add frontend index.html and Vite logo; enhance system stats API with network metrics

2026-02-26 14:43:45 -05:00

src

fix(security): explicitly disable upgrade-insecure-requests via Helmet 8 API

2026-03-22 17:26:08 -04:00

cookies.txt

feat: add alert management functionality in NotificationSettingsModal and implement stacks API endpoint

2026-02-27 09:52:54 -05:00

eslint.config.mjs

fix(lint): resolve all backend ESLint errors to pass CI lint step

2026-03-22 01:09:18 -04:00

package-lock.json

fix(ci): update lock files after adding ESLint deps and fixing high CVEs

2026-03-22 01:02:17 -04:00

package.json

ci: restructure pipeline into parallel jobs with E2E, Docker validation, and auditing

2026-03-22 00:48:49 -04:00

tsconfig.json

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00

vitest.config.ts

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00