Commits

history of internal/httpd/logincookie_test.go

• web: Cache-Control: no-store on the login-link request

  cmc · 2026-09-28 08:59 UTC

  Verified · cmc 8a379d4719

• web: a suspended account cannot mail itself a session

  cmc · 2026-09-05 04:02 UTC

  Verified · cmc cfc0bc7785

• httpd: session cookie is SameSite=Lax

  cmc · 2026-09-05 03:27 UTC

  Verified · cmc 63ec505eda