Creative Exhibition Hall

Lazy cat OIDC login has been integrated. ##Functional highlights ###Static website release - Upload a ZIP project containing `index.html` and automatically extract and deploy it. - Administrators can set a ZIP single file upload limit of 1 - 200 MiB in the background, and the upload page displays the current limit simultaneously. - After selecting ZIP, the file name and file size are displayed, and the actual progress, percentage and number of uploaded bytes are displayed during the upload process. - Paste HTML, CSS, and JavaScript directly in the background to create a website. - Newly created works are saved as drafts by default, and then released to the public after confirming the preview effect. - You can independently control whether the source code of the work is disclosed. - Open source supports online file tree browsing, syntax highlighting and ZIP downloading. - Automatically identify and expand ZIP packages that contain only one project directory. ###Content and Display - Provide the first page of the work, the work details page and the independent content page. - Support the creation of multiple Markdown articles, documents, and code tutorials. - The Markdown editor provides real-time previews, title catalogs and code highlighting. - Support site name, home copy, theme, layout, Logo and Favicon configuration. - Work cards and details pages display the author's username. ###Users and permissions - ** Administrator **: Manage all works, content pages, users and site appearance. - ** Editor **: Create and manage works under your own name. - Administrators and editors can change their username and password in account settings. - Use SQLite sessions, HttpOnly cookies, login CSRF challenges, and write CSRF tokens. ###Security design - ZIP path crossing, number of files, single file size, total decompression amount and compression ratio limit. - Paste code uploads use strict multipart fields, files, parts and UTF-8 verification. - Hosted websites run uniformly in a CSP sandbox that does not contain `allow-same-origin`. - Open source automatically filters sensitive content such as environment files, private keys, and databases. - Login does not rely on a fixed Host whitelist and can be used normally after local addresses and reverse proxies. - Cross-domain access with credentials (CORS) is not enabled. - The administrator password must be explicitly set when a new database is started for the first time, and no public default password is provided.