Yusuf Suleman 5f5660893d fix: TLS verification, cookie hardening, and proxy transport (#7) ...

- Renamed _ssl_ctx to _internal_ssl_ctx (explicitly scoped to internal services)
- Image proxy now uses default SSL context (TLS verification enabled for external URLs)
- Logout cookie clearing now includes HttpOnly, Secure, SameSite=Lax
- proxy.py still uses internal context (Docker services have no valid certs)

Closes #7

2026-03-29 09:13:37 -05:00

2.6 KiB

Raw Blame History

View Raw