TheGeneralist 9544e707ed fix: address 6 code-review findings ... NixOS module (4 fixes): - Remove RestrictNamespaces=true: Chromium (launched by single-file for web captures) needs Linux user namespaces; blocking them broke captures - Escape TOML string values: labels/paths with quotes or backslashes would produce invalid archivr-server.toml and prevent startup - Bracket IPv6 listen addresses: ::1:8080 is rejected by Rust's SocketAddr parser; [::1]:8080 is the correct form (RFC 2732) - Add optional storePath per archive: covers archives initialised with a custom store path outside the default sibling store/ directory Rust (1 fix): - extract_client_ip loopback branch: take last XFF value not first. When a proxy appends to X-Forwarded-For an attacker controls the first entry; the last entry is always set by the trusted local proxy Frontend (1 fix): - Gate fetchArchives on authState === 'authenticated'. The empty-dep useEffect fired on mount (before login), hit 401, and never retried after login because authState was not in the dependency array		2026-06-29 21:30:45 +02:00
..
src	fix: address 6 code-review findings	2026-06-29 21:30:45 +02:00
static	ui: comprehensive UI polish pass	2026-06-28 22:14:08 +02:00
Cargo.toml	security: add per-IP sliding-window rate limit on POST /api/auth/login	2026-06-29 20:06:41 +02:00