blogspace/internal/web/search.go, branch master

Security: Throttle search, cap its words and give the query a deadline

2026-09-18T10:50:42+00:00

/search runs an unindexed regular-expression scan over every published
post, built from up to fifty ".*"-joined words, for anyone who asks —
the cheapest way for a bot to keep Postgres busy. Queries are now cut
at eight words (more never improve the answer), each address gets
thirty searches and then thirty a minute, and the statement is
cancelled after five seconds; a timeout reads as no results and is
logged, rather than a 500.

Co-Authored-By: Claude Opus 5 
Claude-Session: https://claude.ai/code/session_01Sd8UPWrvyYCLj97JexNw3A

Add an HTML mode to posts, page intros and announcements

2026-09-16T15:37:20+00:00

Markdown is the default and unchanged; the editor's new Format switch
stores the text as raw HTML instead, put on the blog exactly as written.
Like the custom HTML module it is unsanitised on purpose: the escape
hatch for embeds, scripts and inline styles that Markdown cannot express.

The source column keeps holding the text in both modes and a `format`
column says how to read it, so the public templates and the feed still
print the stored `*_html`. The dashboard preview of HTML goes into a
sandboxed iframe rather than the page, because a superadmin edits other
people's blogs and their markup must never run on the dashboard origin.
Search snippets of HTML posts are cut from a tag-stripped copy.

Co-Authored-By: Claude Opus 5 
Claude-Session: https://claude.ai/code/session_01Sd8UPWrvyYCLj97JexNw3A

Add a search box module and a search page

2026-09-15T21:00:57+00:00

Readers had no way to find a post. The new "search" module goes in the
header (a bar under the nav) or a side column (a box with a heading) and
is a plain GET form to /search, so it works without JavaScript. The
results page lists the published posts of every page whose title or
Markdown body matches the query — case-insensitive, each word literal,
spaces meaning "anything in between", in order — as title, date and a
short snippet with the match marked, 20 per page.

modules.kind is a CHECK constraint, so a migration widens it; "search"
becomes a reserved page slug so the literal route keeps winning over
/{page}. moduleHasSettings now takes the module: a header search box
has no heading, hence nothing to edit.

Co-Authored-By: Claude Opus 5 
Claude-Session: https://claude.ai/code/session_01Sd8UPWrvyYCLj97JexNw3A