v0.2.1
Reader-rendering correctness, privacy hardening, and a catch-all fallback for self-hosters.
Privacy
- Feed, entry, and attachment responses now send
X-Robots-Tag: noindex, and a new/robots.txtdisallows/rss,/atom,/entries,/files, and/admin— private feeds and emails stay out of search engines.
Feed rendering (works reliably in strict readers)
- Relative links/images in email bodies are absolutized against the sender's site.
- Lazy-loaded images are promoted (
data-src→src,loading="lazy"stripped) so they don't render blank. - Feed
<title>is plain text (HTML stripped, entities decoded). - XML-illegal control characters are stripped from generated feeds (emoji and other valid astral characters preserved).
Self-hosting
- Optional
FALLBACK_FORWARD_ADDRESS: forward non-feed mail to a verified address so you can point a domain's catch-all at kill-the-news without swallowing personal mail. Forwarded mail is counted in the stats dashboard.
Internal
- Sender-site derivation moved onto the
EmailAddressvalue object (siteBaseUrl); domain/layering cleanup.
Full changelog: v0.2.0...v0.2.1