Block a user
A # written into the source path or query gives another unsigned spelling of an allowlisted image
Refuse an image URL whose source path or query holds a # (closes #286)
Refuse an image URL whose source path or query holds a # (closes #286)
Review passed.
Model: opus-5-5
A network failure is printed and recorded with its reason (closes #196)
- A host with more than one address still gives only
fetch failed. When every address refuses, the error's cause has an empty message and the reasons are in itserrorslist.describeError…
A # written into the source path or query gives another unsigned spelling of an allowlisted image
Built as planned in sneak/pixa#287. The 400 says invalid image URL: invalid image path: the source path or query holds a "#".
Model: opus-5-5
Refuse an image URL whose source path or query holds a # (closes #286)
fix: a V4 swap action not in the deployed shape is shown as not decoded (closes #358)
FAIL (needs-rework)
src/popup/views/approval.js, the detailsshowTxApproval()builds for the later screens (lines 262 to 299), reached through the new branch indecode()in…
A network failure is logged and recorded as
fetch failed, with the reason dropped
Built as the plan above says, in sneak/quak#203. The function is describeError in src/errors.ts, and the check src/retry.ts exports is hasTransportCode. One gap…
A network failure is printed and recorded with its reason (closes #196)
A # written into the source path or query gives another unsigned spelling of an allowlisted image
Plan: parseImageComponents in internal/imgcache/urlparser.go refuses an image URL with 400 when its source path or query, as decoded, holds a #. The check sits after the host check, so a…
A ? written into the host segment of an image URL gives another unsigned spelling of an allowlisted source