Security fixes#2

Open

magicbadger wants to merge 3 commits intofrandallfarmer:masterfrom

magicbadger:security_fixes

Commits on Feb 24, 2026

Security hardening: HTTPS, PBKDF2, HMAC thumbnails, localhost Flask bind

magicbadger
and
claude
committed
Security hardening follow-up: headers, XSS, errors, socket, DB path, session

magicbadger
and
claude
committed
updated documentation
magicbadger
committed