Bug fixes:
- Deleting a user with comments no longer 500s: remove the user's
comments first (covers old DBs) and add ON DELETE CASCADE to the FK.
- Drop 'svg' from the default media upload allowlist (stored-XSS vector
for files served directly from public/uploads/).
- Content index now reindexes on page deletion: track routable page
count in content_index_meta and treat a count change as stale, since
the newest-mtime check alone can't see a removal.
- Dev router (public/router.php) preserves the query string across the
canonical trailing-slash redirect, matching .htaccess.
- Fix stale worked-example reference in the comments thread partial.
Migrations: since v2 is unreleased with no live databases, fold the
incremental ALTERs into the base migrations rather than shipping them
separately: verification columns into 0002_create_users.sql, source_count
into 0001_create_content_index.sql; renumber comments to 0003. Update all
code/doc references to the removed/renamed files.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Full rewrite: swap out the v1 framework (src/, controllers/, views/,
twig/, sass/, skeleton/) for the working v2 codebase from phpproject
(App/, novaconium/, public/).
code