ScreenTinker 8e7d599170 fix(widgets): no-store on widget/kiosk render ... The render had no Cache-Control. A copy cached before the X-Frame-Options fix keeps showing blank, and widget data (clock/weather/rss/directory) is dynamic anyway, so mark the render no-store. Pairs with the X-Frame-Options removal.		2026-06-08 23:46:42 -05:00
..
config	fix: log real client IPs through Cloudflare instead of CF edge	2026-05-07 15:26:37 -05:00
db	fix(db): cascade tenant resources on workspace/org delete (#18 follow-up)	2026-06-08 16:01:52 -05:00
lib	fix(security): patch quick-win findings from the codebase review	2026-06-08 19:02:19 -05:00
middleware	fix(security): patch quick-win findings from the codebase review	2026-06-08 19:02:19 -05:00
player	fix(player-web): independent per-zone rotation in multi-zone layouts	2026-06-08 23:12:29 -05:00
routes	fix(widgets): no-store on widget/kiosk render	2026-06-08 23:46:42 -05:00
services	feat(signup): T+3 activation nudge for users with zero paired screens	2026-05-30 20:28:24 -05:00
test	fix(security): sanitize public widget render to close stored XSS	2026-06-08 19:11:14 -05:00
ws	feat(debug): live per-device debug logging toggle on the device screen	2026-06-08 21:49:03 -05:00
.gitignore	feat(email): Microsoft Graph send + alert spam protection + preferences UI	2026-05-12 18:16:40 -05:00
config.js	feat(signup): optional org-on-create for self-service signups (#12)	2026-06-05 11:16:27 -05:00
package-lock.json	feat(email): Microsoft Graph send + alert spam protection + preferences UI	2026-05-12 18:16:40 -05:00
package.json	test(admin): node:test coverage for Add User + role gating	2026-06-05 11:23:06 -05:00
server.js	fix(security): patch quick-win findings from the codebase review	2026-06-08 19:02:19 -05:00