Vadym Samoilenko 1317ee7ca4 feat(t6+t7+t11): native captions track, AD audio sync, CSRF protection ... T-6: Add Blob URL native <track> in VideoWithCaptions so browser CC button works in fullscreen. T-7: Sync hidden <audio> AD playback with video play/pause/seeked events. T-11: Double Submit Cookie CSRF — _set_auth_cookies issues httponly refresh_token + readable csrf_token; /refresh validates X-CSRF-Token header; frontend reads csrf_token cookie and sends header on all refresh calls. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-04-29 19:08:27 +01:00
..
v1	feat(t6+t7+t11): native captions track, AD audio sync, CSRF protection	2026-04-29 19:08:27 +01:00