Search results

[Security] Implement Subresource Integrity hashes for loaded scripts

Status: Open.

#517 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Add Content-Security-Policy header to prevent XSS

Status: Open.

#516 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Prevent accidental CORS wildcard in production

Status: Open.

#515 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Review and limit verbose logging in production

Status: Open.

#514 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Add security headers at FastAPI level (backup to Nginx)

Status: Open.

#513 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Implement account lockout after failed login attempts

Status: Open.

#512 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Generate random SECRET_KEY for test environment

Status: Open.

#511 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Sanitize validation error messages in production

Status: Open.

#510 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Add resource ownership verification to all endpoints

Status: Open.

#509 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Restrict debug routes to admin-only access

Status: Open.

#508 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

[Security] Add CSRF token protection for state-changing operations

Status: Open.

#507 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026

reporting a bug turns the website blue

bugSomething isn't workingSomething isn't working

user-reported

Status: Open.

#505 In JoshCLWren/comic-pile;

· JoshCLWren opened on Apr 18, 2026