4 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	6c154af251	fix(workspace): single scroll area, drag cleanup, thin note titles with bundled Inter ... - the workspace fills the window; only the note scrolls (also on phones, where the sideways scroll area used to scroll on its own) - clear drag state on dragend, calmer sidebar toggle when collapsed - ship Inter as variable font, light and larger note titles; header shows the title only after the big title scrolled away and stays one row on phones - main builds show the package version without -dev Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-30 18:58:55 +01:00
sandrodachandClaude Opus 5.5	b2ecda9896	fix(security): safe links and security headers (FLAW-28, FLAW-29) ... safeHref lets only http, https and mailto become links (Markdown viewer, outliner, legal links); javascript: and friends show as text. A middleware sets a Content-Security-Policy (scripts only from MindSift, no framing, connections only to this server), X-Frame-Options, nosniff, Referrer-Policy and a Permissions-Policy. The two inline scripts of index.html moved to files so script-src stays 'self'. The second inline script also deleted every cache on each page load, which undermined the offline start; it is gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:02:13 +01:00
sandrodach	212cb32bb0	feat(mobile): add context-sensitive MindSift logo menu, slide-over file drawer, and larger touch targets	2026-10-25 21:08:48 +01:00
sandrodach	84bc6884b0	First draft	2026-10-24 16:56:44 +02:00