mirror of
https://github.com/runbear-io/beardrive.git
synced 2026-08-25 08:08:08 +02:00
Rendered-markdown share pages get a small "Shared with BearDrive" footer linking to the repo — the shell template only, so shared raw HTML is still served byte-for-byte and the /s/ sandbox CSP is unchanged. All /s/* responses now sit behind a per-IP token bucket (default 120 req/min sustained + burst, tunable via "share_rpm" in the web config) so the one unauthenticated surface of a hub can't be scraped into a free CDN. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01R7Q9ZKSZRTdvrSJkYLUmYs