routewatch

185 Commits 4 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	89bdda18a5	Add the HTTP hardening the policy requires before 1.0 (closes #108 ) check / check (push) Canceled after 0s Details Every answer carries the six security headers REPO_POLICIES.md lists. The Content-Security-Policy allows inline content only with a nonce made for that answer; the pages put it on their style and script blocks and drop their four style attributes. The request log and /ip/ take a forwarded address only from a proxy listed in TRUSTED_PROXIES, which stops the start when set but invalid: the last X-Forwarded-For entry that is not a trusted proxy. X-Real-IP and True-Client-IP are no longer read. The JSON routes and the health check send fixed messages in place of database, parser and resolver errors, and log the detail. Model: opus-5-5	2026-10-20 01:36:18 +02:00
sneak	58b5333c6c	Fix navbar and simplify templates - Fix nested anchor tags in navbar (invalid HTML) - Hardcode app name and author in templates - Remove hero section from index page	2025-12-31 15:10:24 -08:00
sneak	4284e923a6	Add navbar and home page with search functionality - Create new home page (/) with overview stats, ASN lookup, AS name search, and IP address lookup with JSON display - Add responsive navbar to all pages with app branding - Navbar shows "routewatch by @sneak" with link to author - Status page accessible via navbar link - Remove redirect from / to /status, serve home page instead	2025-12-31 14:56:02 -08:00

Author

SHA1

Message

Date

clawbot

89bdda18a5

Add the HTTP hardening the policy requires before 1.0 (closes #108 )

check / check (push) Canceled after 0s

Details

Every answer carries the six security headers REPO_POLICIES.md lists.
The Content-Security-Policy allows inline content only with a nonce made
for that answer; the pages put it on their style and script blocks and
drop their four style attributes.

The request log and /ip/ take a forwarded address only from a proxy
listed in TRUSTED_PROXIES, which stops the start when set but invalid:
the last X-Forwarded-For entry that is not a trusted proxy. X-Real-IP
and True-Client-IP are no longer read.

The JSON routes and the health check send fixed messages in place of
database, parser and resolver errors, and log the detail.

Model: opus-5-5

2026-10-20 01:36:18 +02:00

sneak

58b5333c6c

Fix navbar and simplify templates

- Fix nested anchor tags in navbar (invalid HTML)
- Hardcode app name and author in templates
- Remove hero section from index page

2025-12-31 15:10:24 -08:00

sneak

4284e923a6

Add navbar and home page with search functionality

- Create new home page (/) with overview stats, ASN lookup,
  AS name search, and IP address lookup with JSON display
- Add responsive navbar to all pages with app branding
- Navbar shows "routewatch by @sneak" with link to author
- Status page accessible via navbar link
- Remove redirect from / to /status, serve home page instead

2025-12-31 14:56:02 -08:00