bruno pushed to main at Projets/NewTube 2026-10-01 08:27:50 -04:00
82d0a8fb3b fix(menu-fab): navigation du menu correcte sur /shorts + FAB plus compact
bruno pushed tag v7.3.8 to bruno/flowdeck 2026-10-01 08:15:14 -04:00
bruno pushed to main at bruno/flowdeck 2026-10-01 08:15:11 -04:00
ffa1fa89ab fix: A25 + A21 (partiel) — plus d'exception muque, transaction protégée (v7.3.8)
bruno pushed tag v7.3.7 to bruno/flowdeck 2026-10-01 07:51:37 -04:00
bruno pushed to main at bruno/flowdeck 2026-10-01 07:51:36 -04:00
3ad2605c9e fix: A14 — fin du fallback « row admin » sur l'agent (v7.3.7)
bruno pushed tag v7.3.6 to bruno/flowdeck 2026-10-01 07:39:55 -04:00
bruno pushed to main at bruno/flowdeck 2026-10-01 07:39:53 -04:00
1f705ce512 fix: A19 terminé — plus aucun préfixe cookie-auth exempt du CSRF (v7.3.6)
bruno pushed to main at Projets/NewTube 2026-10-01 07:19:05 -04:00
7ceec59841 feat(menu-lecteur): refonte UI/UX professionnelle du menu FAB
bruno pushed tag v7.3.5 to bruno/flowdeck 2026-09-30 23:37:01 -04:00
bruno pushed to main at bruno/flowdeck 2026-09-30 23:36:59 -04:00
cf76e00f12 docs(roadmap): A19 — 49 fetch restants (compte exact) au lieu de 51
0861f1fdbf fix: A19 (partiel) — CSRF réservé aux vrais cas d'exemption (v7.3.5)
Compare 2 commits »
bruno pushed tag v7.3.4 to bruno/flowdeck 2026-09-30 23:18:58 -04:00
bruno pushed to main at bruno/flowdeck 2026-09-30 23:18:56 -04:00
72fcef2ba9 fix: A16 — ACL sur l'export et les pièces jointes (v7.3.4)
bruno pushed tag v7.3.3 to bruno/flowdeck 2026-09-30 23:10:53 -04:00
bruno pushed to main at bruno/flowdeck 2026-09-30 23:10:52 -04:00
5a537f5dc3 fix: A12–A24 — SSRF, auth routes legacy, uploads, N+1 et routes doublonnes (v7.3.3)
bruno pushed to main at Projets/NewTube 2026-09-30 22:49:22 -04:00
01e0671de9 feat(lecteur): menu FAB partage /watch et /shorts
bruno pushed tag v7.3.2 to bruno/flowdeck 2026-09-30 22:39:07 -04:00
bruno pushed to main at bruno/flowdeck 2026-09-30 22:39:05 -04:00
8ab6569974 fix: A11 + A18 — path traversal avatar et XSS/flags sur la vue publique (v7.3.2)
bruno pushed tag v7.3.1 to bruno/flowdeck 2026-09-30 22:27:38 -04:00
bruno pushed to main at bruno/flowdeck 2026-09-30 22:27:28 -04:00
69a0aceba6 fix: A10 — autoescape Jinja2 activé partout via un Environment partagé
bruno pushed to main at bruno/flowdeck 2026-09-30 22:03:37 -04:00
d76d7943fc docs(roadmap): A3-A8 cochés — bloc fallback admin corrigé, suite 1016/1016