4 Commits

Author	SHA1	Message	Date
Julien Herr	a0415cdc41	refactor: replace custom HMAC CSRF with hono/csrf middleware ... Removes 38-line hand-rolled HMAC-SHA256 implementation in favour of the built-in hono/csrf, which validates the Origin header natively. - Delete src/utils/csrf.ts - Replace custom CSRF middleware with hono/csrf (Origin-header check) - Remove csrfToken from ContextVariableMap, layout(), forms, and JS fetch() calls - Update admin tests: swap X-CSRF-Token for Origin header Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-22 10:28:26 +02:00
Julien Herr	7d375693b9	feat: complete Phase 2 tech debt remediation ... - Extract shared RSS/Atom fetch logic into feed-fetcher utility (P1-3) - Split email-processor into validateEmail/storeEmail functions (P1-6) - Add stateless HMAC-SHA256 CSRF protection to admin forms (P2-8) - Fix Hono<{ Bindings: Env }> type safety across all routes (P3-13) - Add entries.test.ts and files.test.ts with full coverage (P1-7) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-22 09:46:55 +02:00
Julien Herr	3ed9d2ee22	chore: apply Prettier formatting to entire codebase ... Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-05-20 22:01:53 +02:00
Young Lee	8839aac24b	Set up initial project and files	2025-02-27 14:51:38 -08:00