From f5cea97adf43511c2e9afbf3a69dba9ff70a0161 Mon Sep 17 00:00:00 2001 From: DocFast Bot Date: Tue, 17 Feb 2026 11:40:27 +0000 Subject: [PATCH] security: remove Change Email feature (leaked key = account hijack) --- public/change-email.html | 353 --------------------------------- public/impressum.html | 8 +- public/index.html | 146 +++++++------- public/partials/_footer.html | 1 - public/privacy.html | 8 +- public/sitemap.xml | 1 - public/src/change-email.html | 293 --------------------------- public/status.html | 1 - public/terms.html | 10 +- src/index.ts | 8 - src/routes/email-change.ts | 99 --------- templates/partials/footer.html | 1 - 12 files changed, 80 insertions(+), 849 deletions(-) delete mode 100644 public/change-email.html delete mode 100644 public/src/change-email.html delete mode 100644 src/routes/email-change.ts diff --git a/public/change-email.html b/public/change-email.html deleted file mode 100644 index b1578ee..0000000 --- a/public/change-email.html +++ /dev/null @@ -1,353 +0,0 @@ - - - - - -Change Email — DocFast - - - - - - - - - - - -
-
- - -
-

Change Email

-

Enter your API key and new email address.

-
-
- - -
-
- - -
- -

A 6-digit code will be sent to your new email address

-
- - -
-
-
-

Sending verification code…

-
-
- - -
-

Check your inbox

-

We sent a 6-digit code to

-
-
- - -
- -

Code expires in 15 minutes

-
- - -
-
-
-

Email updated!

-

Your account email has been changed to

- Back to Home → -
-
- -
-
- - - - - - - diff --git a/public/impressum.html b/public/impressum.html index 7c13fc2..201a558 100644 --- a/public/impressum.html +++ b/public/impressum.html @@ -20,7 +20,7 @@ body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Robo a { color: var(--accent); text-decoration: none; transition: color 0.2s; } a:hover { color: var(--accent-hover); } .container { max-width: 800px; margin: 0 auto; padding: 0 24px; } -nav { padding: 20px 0; border-bottom: 1px solid var(--border); } +nav { padding: 20px 0; border-bottom: 1px solid var(--border); position: sticky; top: 0; background: var(--bg); z-index: 100; } nav .container { display: flex; align-items: center; justify-content: space-between; } .logo { font-size: 1.25rem; font-weight: 700; letter-spacing: -0.5px; color: var(--fg); display: flex; align-items: center; gap: 8px; text-decoration: none; } .logo span { color: var(--accent); } @@ -44,6 +44,8 @@ footer .container { display: flex; justify-content: space-between; align-items: footer .container { flex-direction: column; text-align: center; } .nav-links { gap: 16px; } } + +.sr-only { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0,0,0,0); white-space: nowrap; border: 0; } @@ -96,9 +98,7 @@ footer .container { display: flex; justify-content: space-between; align-items: - +
@@ -336,7 +356,7 @@ html, body {
🇪🇺
-

Hosted in the EU

+

Hosted in the EU

Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)

@@ -404,7 +424,7 @@ html, body {
€9 /mo
For production apps and businesses
    -
  • 5,000 PDFs per month
  • +
  • 2,500 PDFs per month
  • All conversion endpoints
  • All templates included
  • Priority support (support@docfast.dev)
  • @@ -415,15 +435,15 @@ html, body {
+ +