ansible/flaskpaste
1
0
Fork 0
forked from claw/flaskpaste
Code Pull Requests Activity
109 Commits 1 Branch 0 Tags
0496a39a915e68aa1c17df73a7983f8a49e55ad2
Commit Graph

109 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Username
682df17257 add command-line client 2025-12-20 03:57:41 +01:00
Username
7f3c37f271 tasklist: mark head method complete 2025-12-20 03:47:35 +01:00
Username
4532b9b1d5 add HEAD method for paste endpoints 2025-12-20 03:47:20 +01:00
Username
4007f0ea65 tasklist: mark wal mode complete 2025-12-20 03:45:05 +01:00
Username
9c5b1d9804 enable sqlite wal mode for file databases 2025-12-20 03:44:38 +01:00
Username
a07f1e662e add gitea ci workflow 2025-12-20 03:31:43 +01:00
Username
4cb29fa3d2 add project structure files 2025-12-20 03:31:37 +01:00
Username
202e927918 add content-hash dedup for abuse prevention 
Throttle repeated submissions of identical content using SHA256 hash
tracking. Configurable via FLASKPASTE_DEDUP_WINDOW and FLASKPASTE_DEDUP_MAX.
 2025-12-20 03:31:20 +01:00
Username
8f9868f0d9 flaskpaste: initial commit with security hardening 
Features:
- REST API for text/binary pastes with MIME detection
- Client certificate auth via X-SSL-Client-SHA1 header
- SQLite with WAL mode for concurrent access
- Automatic paste expiry with LRU cleanup

Security:
- HSTS, CSP, X-Frame-Options, X-Content-Type-Options
- Cache-Control: no-store for sensitive responses
- X-Request-ID tracing for log correlation
- X-Proxy-Secret validation for defense-in-depth
- Parameterized queries, input validation
- Size limits (3 MiB anon, 50 MiB auth)

Includes /health endpoint, container support, and 70 tests.
 2025-12-16 04:42:18 +01:00