Security fixes n.a.v. pentest op noorlander.info

- CSRF token toegevoegd aan admin login formulier
- Directory listing uitgeschakeld (Options -Indexes)
- Secure/SameSite=Strict cookie verbeterd in AdminAuth
- app.js.backup en source maps verwijderd
- Version disclosure configureerbaar via config.json
- .map en backup extensies geblokkeerd in .htaccess

.htaccess

@@ -1,10 +1,19 @@
+# Disable directory listing globally
+Options -Indexes
+
 # Security - Block access to entire application
 <Files ~ "^\.">
     Order allow,deny
     Deny from all
 </Files>
 
-<FilesMatch "\.(php|ini|log|conf|config|md)$">
+<FilesMatch "\.(php|ini|log|conf|config|md|map)$">
+    Order allow,deny
+    Deny from all
+</FilesMatch>
+
+# Block access to backup files
+<FilesMatch "\.(backup|bak|old|orig|swp|save)$">
     Order allow,deny
     Deny from all
 </FilesMatch>