Age	Commit message (Collapse)	Author	Lines
9 days	Mark a page behind an auth filter private	Bryce Kwon	-5/+5
	Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
2026-09-21	Unify the docs, samples and extensions	Bryce Kwon	-5/+4
2026-09-06	Refresh the server configs and drop `unsafe-inline`	Bryce Kwon	-17/+15
	The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy.
2026-08-18	Rework the response headers in the server configs	Bryce Kwon	-8/+38
2026-08-01	Make the server configs complete standalone files	Bryce Kwon	-22/+38
2026-07-25	Reorganize the tree into vendor/ and custom/	Bryce Kwon	-0/+132