summaryrefslogtreecommitdiffstats
path: root/roseh.moe.go
AgeCommit message (Collapse)AuthorFilesLines
2025-10-07Use a vanity URLRose Hogenson1-2/+19
2025-10-07Vanity url?Rose Hogenson1-0/+19
2025-10-07Bring back pbkdf2Rose Hogenson1-16/+10
2025-10-06Add uploader toolRose Hogenson1-8/+10
2025-10-06Simplify simplify simplifyRose Hogenson1-51/+38
2025-10-05Remove timeoutsRose Hogenson1-6/+1
2025-10-05Bring back the notepadRose Hogenson1-2/+251
2025-10-05Remove unused flagsRose Hogenson1-4/+2
2025-10-05Implement a "magic wormhole" file-sharing solutionRose Hogenson1-659/+93
2025-10-04Allow downloading without gobRose Hogenson1-57/+90
2025-10-04Allow http multipart uploadRose Hogenson1-32/+150
2025-10-01Linked list is cool, but have you heard of arrayRose Hogenson1-49/+45
2025-10-01Fix the n^2 using a linked listRose Hogenson1-85/+96
2025-09-30Allow appending to notesRose Hogenson1-38/+100
Right now it's n^2 which is a big problem (to be fixed later)
2025-09-29Implement "online authenticated encryption"Rose Hogenson1-33/+25
2025-09-28Add a gob APIRose Hogenson1-34/+278
2025-09-25Set read and write timeoutsRose Hogenson1-1/+6
2025-09-25Make CheckPassword a methodRose Hogenson1-1/+1
This works better in godoc
2025-09-25Move complex crypto logic into a helper packageRose Hogenson1-110/+36
2025-09-25Use AES-CTR-HMAC-SHA256 instead of AES-GCMRose Hogenson1-20/+55
2025-09-25Use a slightly more conservative cookie expirationRose Hogenson1-1/+1
2025-09-25Remove temp file on errorRose Hogenson1-0/+2
2025-09-25Use HMAC-SHA256 for authenticationRose Hogenson1-47/+67
2025-09-25Hard-code the redirect pathRose Hogenson1-37/+5
We can add back all that garbage when it's necessary
2025-09-24Fix the open redirect vulnerabilityRose Hogenson1-5/+36
2025-09-24Use PBKDF2-HMAC-SHA512 for key derivationRose Hogenson1-17/+4
2025-09-24Don't attach CSRF token on loginRose Hogenson1-19/+14
There's just no reason to
2025-09-23Use HKDF to expand key into both auth and encryptRose Hogenson1-17/+39
I guess having the password hash depend on the encryption key isn't a great idea. Let's make them independent using hkdf
2025-09-23Don't reuse cipher.AEAD between threadsRose Hogenson1-19/+34
I'm not sure if it's safe or not, but better to be cautious
2025-09-23Combine password hash and salt secretsRose Hogenson1-6/+2
2025-09-23Use HMAC instead of ed25519Rose Hogenson1-18/+20
2025-09-23Encrypt notepad at restRose Hogenson1-3/+40
2025-09-23Use pbkdf2 for password hashing instead of sha512Rose Hogenson1-5/+16
2025-09-23Add CSRF protectionRose Hogenson1-12/+36
2025-09-20Ditch HTMXRose Hogenson1-2/+2
2025-09-20Don't use http basic authRose Hogenson1-45/+29
I think http basic auth kind of sucks
2025-09-20Allow basic auth for manual saveRose Hogenson1-1/+1
2025-09-20Revert "Add temporary logging"Rose Hogenson1-7/+0
This reverts commit 413535b9c6d76f57e17bec50131e3144be421c05.
2025-09-20Revert "idk"Rose Hogenson1-1/+1
This reverts commit 88270f9fe48149fb382441466575dbb40744d06d.
2025-09-20idkRose Hogenson1-1/+1
2025-09-20Add temporary loggingRose Hogenson1-0/+7
2025-09-20Add manual saveRose Hogenson1-36/+72
2025-09-20Turn on securityRose Hogenson1-8/+8
2025-09-20Revert "Support systemd dynamic user"Rose Hogenson1-5/+7
This reverts commit 3d0eb1e9d214b8a0652b360313aa2d27eacc3a3a.
2025-09-20Support systemd dynamic userRose Hogenson1-7/+5
2025-09-20Add support for a private notepadRose Hogenson1-1/+158
2025-09-07Remove redirectRose Hogenson1-27/+7
2025-03-22Use new go 1.22 routingRose Hogenson1-22/+12
2024-10-25Get rid of the blog and use webp.Rose Hogenson1-82/+13
2024-10-23Don't pre-render templates.Rose Hogenson1-89/+57
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-04 16:04:50 +0000