Koko210/immich-folio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

release: v0.19.0

Browse Source 
Release v0.19.0. See the `## [0.19.0] — 2026-09-29` section of
[CHANGELOG.md](https://github.com/ralksta/immich-folio/blob/dev/CHANGELOG.md)
for the full list.

Highlights: client proofing links (#683), custom content pages (#738),
asset picker search (#740), concurrent-edit detection (#742), env-locked
settings (#739), an accessibility baseline (#741), three security fixes
with advisories (#737, #755, #759), and a pre-release quality pass
(#780–#797).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Ralf <rohlenbo79@gmail.com>
Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com>
Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com>
Co-authored-by: Lance Martin <lancetaylor95@gmail.com>
This commit is contained in:
Ralksta
2026-09-29 22:50:30 +02:00
committed by GitHub
parent 5f251923f0
commit ad8b09700b
297 changed files with 19398 additions and 1800 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
components/ContactForm.tsx
View File

@@ -7,6 +7,12 @@
* Spam protection without a captcha, which would be another third party: a
* honeypot field people never see, and `startedAt`, the time the form was
* rendered, which the server compares against the submission.
*
* `startedAt` is the server's clock, handed down by the page. The check
* subtracts it from the server's clock at submission, and a stamp from the
* visitor's device made that a comparison between two clocks: a phone running
* a few minutes fast looked like a bot posting before the form existed, and
* its message was dropped behind a thank-you page.
*/
import { useState } from 'react';
@@ -14,15 +20,14 @@ import { useDictionary } from './I18nProvider';
interface Props {
retentionDays: number;
/** `Date.now()` on the server when the page was rendered. */
renderedAt: number;
}
type State = 'idle' | 'sending' | 'done';
export default function ContactForm({ retentionDays }: Props) {
export default function ContactForm({ retentionDays, renderedAt }: Props) {
const t = useDictionary().contact;
// When the form became usable. A bot posting straight to the endpoint has
// none; one filling the form on load is faster than MIN_FILL_MS.
const [startedAt] = useState(() => Date.now());
const [state, setState] = useState<State>('idle');
const [error, setError] = useState('');
@@ -40,7 +45,9 @@ export default function ContactForm({ retentionDays }: Props) {
email: data.get('email'),
message: data.get('message'),
website: data.get('website'),
startedAt,
// A bot posting straight to the endpoint has no stamp; one filling
// the form on load is faster than MIN_FILL_MS.
startedAt: renderedAt,
}),
});
if (res.ok) {