Commit Graph

24 Commits

Author SHA1 Message Date
124fb62657 Code format 2026-02-07 02:42:33 +01:00
5b06e279f3 Add analyzer and frontend lint guardrails 2026-02-07 02:12:00 +01:00
567502d665 Remove legacy reveal phase paths and rename reveal data loader 2026-02-07 01:49:38 +01:00
f615ef3a4a Standardize service errors with ProblemDetails envelope 2026-02-07 01:23:54 +01:00
b86343a59d Harden image URL validation against followed redirects 2026-02-07 00:46:03 +01:00
81c04e0866 Refactor phase reads to pure lookups and align admin docs 2026-02-07 00:36:04 +01:00
c0756ff2c6 C# formatting 2026-02-05 20:39:12 +01:00
67a164e53b Expand test coverage to match specs 2026-02-05 18:57:25 +01:00
8176940d18 Centralize admin auth with endpoint filter 2026-02-05 17:11:17 +01:00
6b5f8a66c9 Remove admin key support; admin must be authenticated 2026-02-05 17:07:37 +01:00
52960a78bc Stop phase polling writes unless state changes 2026-02-05 17:04:52 +01:00
8e50b31a5b Harden screenshot validation against SSRF and add user-facing errors 2026-02-05 16:58:15 +01:00
1d28ea6568 Escape rendered suggestion content and validate URLs 2026-02-05 16:51:05 +01:00
a6265e8656 Switch to signed cookie auth and stop leaking player IDs 2026-02-05 16:28:22 +01:00
5d432c9d17 Add linked suggestions with synced voting 2026-02-05 09:07:46 +01:00
13c8bb6194 Add votes-final flag, warn on missing votes, and sync phases with results toggle 2026-02-04 22:54:36 +01:00
f1245c200f Auto-upgrade legacy Reveal phase players to Vote 2026-02-04 22:09:21 +01:00
e5e27af0af Add per-user phase navigation with results toggle 2026-02-04 21:43:12 +01:00
af84fc50d4 Add player count fields with validation and labeled UX 2026-01-29 01:53:24 +01:00
f713756ece Add remote image validation for screenshot URLs 2026-01-29 01:43:02 +01:00
5b62640b76 Validate screenshot URLs server- and client-side 2026-01-29 01:39:23 +01:00
60191a1fe3 Add admin accounts and streamlined header UI 2026-01-29 01:14:53 +01:00
f1534b7631 Add username/password auth and login UI 2026-01-29 01:01:13 +01:00
983488d258 Split API into phase-specific endpoint files 2026-01-28 17:11:25 +01:00