Skip to content

v1.1.0

Latest
Latest

Choose a tag to compare

View all tags
@Ishannaik Ishannaik released this 11 Jul 11:24
· 68 commits to main since this release
v1.1.0
961520f

Zero-knowledge encrypted pastebin — v1.1.0.

Security

  • Constant-time admin credential comparison (removes a login timing oracle).
  • Admin session auth extracted into a tested module + 13 unit tests (forged / tampered / expired / wrong-secret token rejection).

Performance

  • Lazy-load CodeMirror (skeleton-first) on the paste + home routes; highlight.js dynamic-imported off the LCP home bundle.
  • Parallelized admin dashboard queries; .lean() paste reads; gzip-compress before AES-256-GCM.

Maintenance

  • Greened the repo: 0 svelte-check errors, added missing dev deps.
  • Removed 7 unused dependencies + a dead admin chart query.

Docs

  • Added SECURITY.md, /.well-known/security.txt, and a "Verify the zero-knowledge claim yourself" README guide.
  • Aligned README/.env.example env-var names with the code.
Assets 2
Loading