5 Commits

Author	SHA1	Message	Date
Willem van den Ende	b6ff541b13	Fix status banner auth check to use current_scope ... phx.gen.auth sets current_scope, not current_user. Use !! to ensure boolean for HEEx template and register_and_log_in_user in tests for proper auth session.	2026-04-01 22:06:07 +00:00
Willem van den Ende	5395b2de80	Show draft/scheduled status banners for authenticated users	2026-04-01 21:40:17 +00:00
Willem van den Ende	3837a72059	update blog post, and run credo with 'pi'	2026-03-18 15:03:24 +00:00
Willem van den Ende	6887ae4087	Security: Validate blog controller inputs (page param, blog ID) ... Ran a claude /security-review, fixed two vulnerabilities Use a plug to resolve blog_id, returning a clean 404 for unknown blogs instead of raising with inspect(). Parse page param with Integer.parse so invalid values (non-numeric, negative, zero) fall back to page 1 instead of crashing. Add 5 tests covering these cases.a	2026-03-17 12:17:29 +00:00
Your Name	bc14696f57	Static blog with front page summary ... Goal: have a personal blog, and try out another point in the 'modular app design with elixir' space. Designing OTP systems with elixir had some interesting ideas.	2026-03-17 11:17:21 +00:00