alexkiro / no-karma Goto Github PK

Add security header to backend and frontend (HSTS, CSP, X-Frame-Options, etc.)

This still show up even if the post is completely empty e.g. here https://no-karma.app/r/AskReddit/comments/qwfden

Some subreddits have custom emoji that are now shown ATM.

It appears that the reddit API will in fact at times return duplicate posts for some reason. Need to investigate and de-duplicate them in the frontend.

These have been useful while developing, but can be removed likely now (or added as an app setting, "debug mode")

Load more comments on demand, and show where some comments have been omitted (we should have the number already)

ATM they only display the title.

Add a default virtual host that rejects all traffic

After logout the application no longer works until the cookies are cleared

E.g. this one

I think in some cases reddit responds with the proper CORS headers and it actually isn't necessary. I haven't been able to pinpoint if and when it happens though.

See https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility and https://ssl-config.mozilla.org/#server=nginx

Comment focus view by comment id (e.g. for bookmarking)

/r/:subreddit/comments/:postId/comment/:commendId

It's probably too bright?

Multi image post are too jank, and destroy the layout when you switch to a different image while the new image is loading.