hermes 7e60343ed5 Add security headers, external CSS, HTML escaping ...

- Middleware sets CSP (default-src 'none'; style-src 'self'), HSTS,
  X-Content-Type-Options, X-Frame-Options, Referrer-Policy,
  Permissions-Policy on every response
- Inline <style> moved to /styles.css so CSP needs no unsafe-inline
- /favicon.ico returns a 1x1 GIF (kills 404 noise)
- Escape LLM jokes, article title, and URL before HTML rendering (XSS fix)

2026-09-29 20:41:16 +00:00

..

__init__.py

Wiki Jokes: daily LLM jokes from Wikipedia featured article

2026-09-29 19:38:01 +00:00

config.py

Wiki Jokes: daily LLM jokes from Wikipedia featured article

2026-09-29 19:38:01 +00:00

db.py

Wiki Jokes: daily LLM jokes from Wikipedia featured article

2026-09-29 19:38:01 +00:00

generator.py

Wiki Jokes: daily LLM jokes from Wikipedia featured article

2026-09-29 19:38:01 +00:00

llm_client.py

Repair curly-quote JSON from LLM before parsing

2026-09-29 19:54:56 +00:00

main.py

Add security headers, external CSS, HTML escaping

2026-09-29 20:41:16 +00:00

templates.py

Add security headers, external CSS, HTML escaping

2026-09-29 20:41:16 +00:00

wiki_client.py

Wiki Jokes: daily LLM jokes from Wikipedia featured article

2026-09-29 19:38:01 +00:00