v0.1.2 — Security Hardening

Security Fixes

HIGH

• Make API auth token REQUIRED (was optional — API was open)
• Remove unsafe-eval from production CSP

MEDIUM

• Add CSRF Origin header check for POST/PUT/DELETE
• Cap rate limiter map size to prevent memory exhaustion

v0.1.1 — CI 搭建

新增 GitHub Actions CI（tsc + next build）。

DreamCode v0.1.0

DreamCode v0.1.0

An interactive Vibe Coding tutorial site for absolute beginners.

Features

• 12 lessons, from concepts to hands-on practice
• Built-in AI teaching assistant for real-time Q&A
• Prompt Playground: describe what you want, get runnable HTML/CSS/JS
• Fully Chinese UI
• Supports Claude, OpenAI, and any OpenAI-compatible API