df26fbbbb0
feat(bskyweb): fetch displayName, add headerField USERNAME, Member Name secondary
2026-06-25 19:17:12 -04:00
dd8f504f2f
feat(bskyweb): regen icon+logo from Bluesky butterfly, drop strip composite
2026-06-25 19:10:03 -04:00
e147fab647
fix(bskyweb): jpeg avatars, base64 wallet creds, require token secret
2026-06-25 18:14:31 -04:00
f1d012000e
fix(bskyweb): validate avatar URL scheme and bound fetch timeout
...
- Add SSRF defense: reject avatar URLs not starting with https://
- Add per-fetch timeout (5s) instead of relying on http.DefaultClient
- Document WebInviteWalletHero handler as unauthenticated by design
2026-06-25 16:38:57 -04:00
0a0fd72f17
feat(bskyweb): add /invite/pass.* and /invite/wallet/* routes
2026-06-25 16:34:41 -04:00
vineyardbovines