Stefan 99882bb80a Restrict readerEmail to allowlisted domains ... Prevents the form being abused as an open email relay to arbitrary addresses (which is the realistic abuse vector — disk fill, server compromise, and device exploitation are all bounded already). Default allowlist: kindle.com, pbsync.com. Suffix matching so subdomains (e.g. free.kindle.com) are also accepted. Configurable via ALLOWED_READER_DOMAINS env var so the list can be extended without code changes.		2026-05-21 23:54:55 +03:00
..
index.html	Restrict readerEmail to allowlisted domains	2026-05-21 23:54:55 +03:00