16 Commits

Author	SHA1	Message	Date
Alexandre Lion	8f46837900	Fix critical security vulnerabilities (#211) ... * Fix critical security vulnerabilities Address 5 critical findings from security audit: - Sanitize custom embed HTML to prevent stored XSS (strip all non-iframe content) - Escape URLs in format_body/1 to prevent reflected XSS via post messages - Add authorization check to form export endpoint (IDOR fix) - Replace String.to_atom/1 on user input with explicit whitelists (8 locations) - Add IP-based rate limiting on authentication endpoints via Hammer * Start rate limiter before endpoint in supervision tree * Update CHANGELOG	2026-02-09 19:18:14 +01:00
Raúl R Pearson	5cf4759f05	Make S3 service configurable (#190)	2025-12-06 11:31:28 +01:00
Raúl R Pearson	3b511bcc6e	Improve event live listing (#185) ... * Expand user events PubSub * Improve updates in events LiveView	2025-12-04 15:00:23 +01:00
Alex Lion	666299525f	Fix warning	2024-12-25 03:00:19 -05:00
Alex	cdbaac06e0	Add OIDC + better embeds	2024-08-11 11:16:34 +02:00
Alex	6a16e91de9	Fix converter on osx	2024-04-14 19:25:29 +02:00
Alexandre Lion	3f9be7e852	New features for v2 (#83)	2024-04-06 11:48:47 +02:00
Alex	b935502e26	Fix config storage (compile time)	2023-09-23 14:05:23 +02:00
Alex	6aa70fad58	Improve local storage + add PRESENTATION_STORAGE_DIR variable ... #55	2023-09-23 12:02:39 +02:00
Alex	fe52055b60	Format files	2023-09-09 17:20:51 +02:00
Alex	54b9c748b7	Refactor all configuration	2023-09-09 16:59:14 +02:00
Alex	545e469c2f	Add doc for GS_JPG_RESOLUTION	2023-07-02 11:04:07 +02:00
Sami Mokaddem	df14bf5c09	Add ghostscript resolution as env variable (#40)	2023-07-02 11:03:18 +02:00
Finn Behrens	a6418db196	run mix format	2022-11-17 13:37:34 +01:00
Alex	f28e9dc570	Add default value local	2022-07-25 19:48:44 +02:00
Alex	0b392a6953	🎉 First commit of the open source project !	2022-07-23 01:44:03 +02:00