Username
|
4e38517faf
|
pki: add minimal certificate authority
- CA generation with encrypted private key storage (AES-256-GCM)
- Client certificate issuance with configurable validity
- Certificate revocation with status tracking
- SHA1 fingerprint integration with existing mTLS auth
- API endpoints: /pki/status, /pki/ca, /pki/issue, /pki/revoke
- CLI commands: fpaste pki status/issue/revoke
- Comprehensive test coverage
|
2025-12-20 17:20:15 +01:00 |
|
Username
|
7deba711d4
|
entropy: exempt small content from check
CI / test (push) Successful in 38s
Small data has unreliable entropy measurement due to sample size.
MIN_ENTROPY_SIZE (default 256 bytes) sets the threshold.
|
2025-12-20 08:48:13 +01:00 |
|
Username
|
8addf2d9e8
|
add entropy enforcement for optional encryption requirement
CI / test (push) Successful in 38s
Shannon entropy check rejects low-entropy content when MIN_ENTROPY > 0.
Encrypted data ~7.5-8.0 bits/byte, plaintext ~4.0-5.0 bits/byte.
Configurable via FLASKPASTE_MIN_ENTROPY environment variable.
|
2025-12-20 06:57:50 +01:00 |
|
Username
|
c76a158c18
|
bump version to 1.1.0, centralize VERSION constant
CI / test (push) Successful in 37s
|
2025-12-20 04:21:06 +01:00 |
|
Username
|
ccfd8509cc
|
docs: add pow, cli client, and head method documentation
CI / test (push) Successful in 37s
|
2025-12-20 04:09:08 +01:00 |
|
Username
|
202e927918
|
add content-hash dedup for abuse prevention
Throttle repeated submissions of identical content using SHA256 hash
tracking. Configurable via FLASKPASTE_DEDUP_WINDOW and FLASKPASTE_DEDUP_MAX.
|
2025-12-20 03:31:20 +01:00 |
|
Username
|
8f9868f0d9
|
flaskpaste: initial commit with security hardening
Features:
- REST API for text/binary pastes with MIME detection
- Client certificate auth via X-SSL-Client-SHA1 header
- SQLite with WAL mode for concurrent access
- Automatic paste expiry with LRU cleanup
Security:
- HSTS, CSP, X-Frame-Options, X-Content-Type-Options
- Cache-Control: no-store for sensitive responses
- X-Request-ID tracing for log correlation
- X-Proxy-Secret validation for defense-in-depth
- Parameterized queries, input validation
- Size limits (3 MiB anon, 50 MiB auth)
Includes /health endpoint, container support, and 70 tests.
|
2025-12-16 04:42:18 +01:00 |
|