You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
d9c4830cf9
Micro static-site host running entirely on Cloudflare: a Rust->wasm Worker (workers-rs 0.7 + axum 0.8) serving user-uploaded .html/.zip content from R2 at pages.elijah.run/<slug>/, with D1 for users/ sessions/page metadata and GitHub OAuth for login. Admins approve uploaders, delete pages, and can mark pages/users trusted. Security design (docs/plans/2026-07-12-pages-design.md): hosted content is served with a CSP sandbox (opaque origin — no cookies or storage, cannot make credentialed /api calls) unless admin-trusted; strict slug grammar + reserved names; streaming zip validation (traversal, bombs, size/entry/depth limits); SHA-256-hashed session tokens in __Host- cookies; Origin checks on all mutations; upload quotas and size caps. Includes OpenTofu infra (R2, D1, DNS; wrangler owns the Worker deploy), an embedded single-file management UI, deployment guide, and 148 native unit tests + 18 doctests (clippy -D warnings clean on native and wasm32). Deployed and verified in production. Squash of 15 commits from pages-v0: each ticket implemented by a Claude Sonnet agent, reviewed by a Claude Opus agent, tracked with beans (pages-lxjz..pages-shqc). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
1 week ago | |
|---|---|---|
| .. | ||
| pages-77lk--pages-static-site-host-on-cloudflare-v0.md | 1 week ago | |
| pages-adl9--page-content-serving-from-r2.md | 1 week ago | |
| pages-ihlp--opentofu-infra-deployment-docs-project-docs-polish.md | 1 week ago | |
| pages-jaqz--embedded-management-ui-staticindexhtml.md | 1 week ago | |
| pages-jgc4--d1-schema-and-query-layer.md | 1 week ago | |
| pages-kns6--pages-and-users-json-api.md | 1 week ago | |
| pages-lxjz--scaffold-worker-crate-hello-world-builds.md | 1 week ago | |
| pages-saom--core-policy-modules-slug-mime-upload-validation-he.md | 1 week ago | |
| pages-shqc--per-page-and-per-user-trust-opt-out-of-csp-sandbox.md | 1 week ago | |
| pages-zd46--github-oauth-sessions-auth-middleware.md | 1 week ago | |