Paul Nothaft 28f14955e2 fix(gallery): clear the guest identity on gallery logout ...

The gallery password is one shared secret per event and does not
distinguish people. With the guest identity outliving the tab, logging out
and letting the next person enter that password greeted them by the
previous guest's name, with "forget me" - which erases that guest's
selections server-side - one click away. Logout is the leaving-this-device
signal, so it now drops the local identity too. Server row untouched.

2026-09-02 10:22:55 +02:00

..

public

fix(csp): external bootstrap script to survive strict reverse-proxy CSP (#564)

2026-05-31 22:35:00 +02:00

scripts

feat(faces): People in this gallery — face recognition via an optional ML sidecar (#1074) (#1075)

2026-08-18 22:37:28 +02:00

src

fix(gallery): clear the guest identity on gallery logout

2026-09-02 10:22:55 +02:00

.dockerignore

…

.env.example

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

.env.production.example

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

.gitignore

…

audit-frontend.json

…

docker-entrypoint.sh

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

Dockerfile

chore(security): close 21 frontend image CVEs — nginx 1.30 base + apk cache-bust

2026-07-16 10:29:31 +02:00

Dockerfile.dev

…

Dockerfile.prod

…

eslint.config.js

…

i18next.config.ts

i18n: fail safe on empty strings, normalise German to Sie

2026-09-02 09:43:10 +02:00

index.html

fix(branding): point HTML favicon link at /favicon.ico (the real Safari fix)

2026-06-03 19:01:55 +02:00

nginx.conf

fix(analytics): serve self-hosted trackers same-origin so CSP stops blocking

2026-09-02 09:43:10 +02:00

nginx.dev.conf

fix(nginx): honour outer X-Forwarded-Proto when behind a reverse proxy (#547)

2026-05-22 13:32:01 +02:00

package-lock.json

chore(security): close 27 code-scanning alerts via dep + base-image bumps

2026-06-29 23:26:32 +02:00

package.json

chore(main): release 3.122.2-beta.0 (#1258)

2026-09-01 07:30:45 +00:00

postcss.config.js

…

tailwind.config.js

…

tsconfig.app.json

…

tsconfig.json

…

tsconfig.node.json

…

vite.config.ts

feat(deploy): make the all-in-one image installable without a shell (#1124)

2026-08-22 18:37:12 +02:00

vitest.setup.ts

…