6 Commits

Author	SHA1	Message	Date
Ralksta	3bbec5a4ac	🛡️ Sentinel: [CRITICAL/HIGH] Upgrade token encryption to AES-GCM (#117) ... Upgraded `encodeAssetId` and `decodeAssetId` to use `aes-256-gcm` (Authenticated Encryption) instead of `aes-256-cbc`. AES-CBC lacks authentication, leaving it potentially susceptible to padding oracle attacks or ciphertext manipulation. The new token adds a `v2:` prefix which strictly enforces AES-GCM while supporting legacy fallback for cached urls. Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>	2026-04-21 22:51:39 +02:00
ralksta	922302ce5c	chore: implement audit action items and translate hardcoded German text	2026-03-15 07:32:42 +01:00
ralksta	ea72d720df	chore: production-readiness audit fixes and linting cleanup	2026-03-08 16:26:05 +01:00
ralksta	e394fe84a0	security: implement AUTH_SECRET and secure map/exif API routes	2026-03-07 08:18:23 +01:00
ralksta	52fa16c1c8	feat: visual polish & UX — fade-in, theme toggle, scroll-to-top, footer, cursor, badge ... - Add FadeIn component (IntersectionObserver scroll-reveal + load animation) - Add dark/light theme toggle (useSyncExternalStore + localStorage) - Add scroll-to-top button (appears after 300px scroll) - Add configurable footer with social links (gallery.yaml) - Add crosshair cursor on photo grid items - Add 'X photos' count badge on subpage cover images - Add light theme color palette in tokens.css	2026-02-14 11:47:26 +01:00
ralksta	415aef98f2	feat: portfolio with subpages, hero homepage, and obfuscated asset URLs	2026-02-14 00:59:57 +01:00