feat(search): FTS5 lexical search + security hardening for /api/search - #1058

Open

mmcintosh wants to merge 9 commits into

mainfrom

fix/fts5-search-security

Commits on Aug 18, 2026

feat(search): lexical FTS5 search (keyword mode backend)
mmcintosh
committed
0807c06
fix(search): default FTS result cache off — stale public results after unpublish/delete
mmcintosh
committed
433009e
feat(search): index blog post body into FTS via fulltext content field
mmcintosh
committed
36df9f6
chore(search): renumber FTS migration 0003→0005, drop internal planning docs
mmcintosh
committed
96bf46d
fix(search): harden /api/search — published-only floor, internal-type allowlist, XSS-safe highlighting
mmcintosh
committed
6e17861
fix(search): deindex FTS on the other two raw-delete bypass sites
mmcintosh
committed
dcdda88
fix(search): deindex FTS on media delete, escape slug in search results
mmcintosh
committed
80fa874
docs(search): add PR screenshots for the FTS5 keyword search + status-bypass fix
mmcintosh
committed
d8804cf

Commits on Aug 21, 2026

test(search): prove /api/search survives a plugins-off (disableAll) deploy
mmcintosh
committed
c94f3ac