Repository navigation

Phase 1: security and performance hardening - #1

Merged

tzero86 merged 19 commits into

mainfrom

fix/security-performance-audit

Oct 24, 2026

Merged

Phase 1: security and performance hardening#1
tzero86 merged 19 commits into
mainfrom
fix/security-performance-audit

Commits on Oct 24, 2026
- docs(audit): add security and performance audit 2026-10-24
  Browser OS Dev
  committed
  3c6f7d9
- security: contain archive extraction paths
  Browser OS Dev
  committed
  27fb82e
- security: sanitize cloudstream extension names
  Browser OS Dev
  committed
  81ef3e4
- security: validate book ids and download paths
  Browser OS Dev
  committed
  2551d6a
- security: restore TLS certificate validation
  Browser OS Dev
  committed
  35f1e80
- security: verify update checksums
  Browser OS Dev
  committed
  5306c43
- security: redact credentials from logs
  Browser OS Dev
  committed
  61d5f08
- security: harden mega proxy token and CORS
  Browser OS Dev
  committed
  9317dde
- perf: throttle reader and player progress writes
  Browser OS Dev
  committed
  796d2b2
- perf: stop hidden home refresh and duplicate update check
  Browser OS Dev
  committed
  259b5b3
- perf: bound manga precache and progress writes
  Browser OS Dev
  committed
  8b7cd15
- perf: debounce IPTV portal search
  Browser OS Dev
  committed
  15277b3
- perf: decode blurred music backdrop at thumbnail size
  Browser OS Dev
  committed
  96d7c18
- perf: cache player art and isolate video repaints
  Browser OS Dev
  committed
  0d1561b
- fix: retain prior custom download roots for task validation
  Browser OS Dev
  committed
  0e57390
- security: redact remaining scraper and subtitle URLs
  Browser OS Dev
  committed
  dd5478f
- test: isolate startup P2P advisory from shell tests
  Browser OS Dev
  committed
  1de3ba8
- fix: address security and review findings
  Browser OS Dev
  committed
  98a29a0
- style: format changed Dart files
  Browser OS Dev
  committed
  edbb27d

Commits

Commits on Oct 24, 2026