Sicherheits-Header, Werkzeuge und Dokumentation

Browse source

Sicherheit:
- .htaccess im Projektstamm mit X-Content-Type-Options, X-Frame-Options,
  Referrer-Policy, Permissions-Policy und einer Content-Security-Policy;
  da alle Assets lokal liegen, erlaubt sie nur noch die eigene Herkunft
  (Ausnahme: hCaptcha, falls aktiviert)
- includes/, tools/, tests/, updater/storage und uploads/ schützen sich
  über eigene .htaccess-Dateien – auch bei Installation im Unterordner
- Docker: AllowOverride All, damit diese Regeln überhaupt greifen, und
  ein Volume für uploads/, damit Logos ein Image-Update überstehen

Werkzeuge:
- tools/screenshots.py erzeugt alle Bilder in docs/screenshots aus der
  Demo-Instanz; tools/README.md beschreibt beides
- Einstellungs-Tabs sind per ?tab=… direkt verlinkbar (serverseitig, also
  auch ohne JavaScript)

Dokumentation: Readme um Markenfarben, Bild-Upload, lokale Assets,
Sicherheits-Header (inkl. Nginx-Entsprechung) und einen Abschnitt
"Entwicklung" ergänzt; Screenshots neu erzeugt, Version 2.6.0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

...

This commit is contained in:

Friederich Loheide 2026-09-23 06:49:14 +00:00

parent e28527ed91

commit 36e06ac817

30 changed files with 307 additions and 36 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

docs/screenshots/admin-dashboard-dark.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 377 KiB After Width:  |  Height:  |  Size: 379 KiB

BIN

docs/screenshots/admin-dashboard.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 377 KiB After Width:  |  Height:  |  Size: 379 KiB

BIN

docs/screenshots/api-keys.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 316 KiB After Width:  |  Height:  |  Size: 320 KiB

BIN

docs/screenshots/bulk-vouchers.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 312 KiB After Width:  |  Height:  |  Size: 310 KiB

BIN

docs/screenshots/integrations.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 306 KiB After Width:  |  Height:  |  Size: 309 KiB

BIN

docs/screenshots/login-branding.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 464 KiB After Width:  |  Height:  |  Size: 465 KiB

BIN

docs/screenshots/login.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 1 MiB After Width:  |  Height:  |  Size: 1 MiB

BIN

docs/screenshots/maintenance.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 244 KiB After Width:  |  Height:  |  Size: 244 KiB

BIN

docs/screenshots/mobile-vouchers.png Normal file

View file

Binary file not shown.

Side by side After Width:  |  Height:  |  Size: 123 KiB

BIN

docs/screenshots/settings-branding.png Normal file

View file

Binary file not shown.

Side by side After Width:  |  Height:  |  Size: 305 KiB

BIN

docs/screenshots/settings-login.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 315 KiB After Width:  |  Height:  |  Size: 325 KiB

BIN

docs/screenshots/settings.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 260 KiB After Width:  |  Height:  |  Size: 273 KiB

BIN

docs/screenshots/two-factor.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 280 KiB After Width:  |  Height:  |  Size: 284 KiB

BIN

docs/screenshots/updater-available.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 287 KiB After Width:  |  Height:  |  Size: 230 KiB

BIN

docs/screenshots/updater.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 229 KiB After Width:  |  Height:  |  Size: 230 KiB

BIN

docs/screenshots/voucher-form.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 302 KiB After Width:  |  Height:  |  Size: 304 KiB

BIN

docs/screenshots/voucher-result.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 750 KiB After Width:  |  Height:  |  Size: 751 KiB

BIN

docs/screenshots/vouchers.png

View file

Binary file not shown.

Side by side Swipe Overlay Before Width:  |  Height:  |  Size: 411 KiB After Width:  |  Height:  |  Size: 412 KiB