Catubba 256dfecbad fix(dashboard): 401 on non-ASCII API key + correct snippet icon path ...

secrets.compare_digest() rejects non-ASCII str with TypeError, turning
the unauthenticated /api/dashboard endpoint's 401 path into a 500 when
an attacker sends a non-ASCII ?key= or X-API-Key. Compare as UTF-8
bytes instead, and add a regression test.

Also fix the Homepage integration snippet (UI + docs) referencing the
non-existent /favicon.svg; the app serves its icon at
/assets/joulenap-icon.svg.

2026-07-09 00:33:49 +02:00

..

ARCHITECTURE.md

release: v0.1.1 — version bump + doc corrections

2026-07-08 22:48:57 +02:00

CONFIG-WIZARD.md

release: v0.1.1 — version bump + doc corrections

2026-07-08 22:48:57 +02:00

INSTALL.md

release: v0.1.1 — version bump + doc corrections

2026-07-08 22:48:57 +02:00

INTEGRATIONS.md

fix(dashboard): 401 on non-ASCII API key + correct snippet icon path

2026-07-09 00:33:49 +02:00