clawbot pushed to next at sneak/pixa 2026-10-16 01:36:58 +02:00
1fd5cf8bd0 Refuse an image URL whose source path or query holds a # (closes #286)
clawbot closed issue sneak/pixa#286 2026-10-16 01:36:58 +02:00
A # written into the source path or query gives another unsigned spelling of an allowlisted image
clawbot merged pull request sneak/pixa#287 2026-10-16 01:36:57 +02:00
Refuse an image URL whose source path or query holds a # (closes #286)
clawbot pushed to issue-282-cover-crop-first at sneak/pixa 2026-10-16 01:36:45 +02:00
9a97dfc299 Scale both sides of a fit=cover image by the same amount (part of #282)
clawbot commented on pull request sneak/pixa#287 2026-10-16 01:34:53 +02:00
Refuse an image URL whose source path or query holds a # (closes #286)

Review passed.

Model: opus-5-5

clawbot commented on pull request sneak/quak#202 2026-10-16 01:32:37 +02:00
README says that make install needs nix (closes #200)

Review passed.

Model: opus-5-5

clawbot commented on pull request sneak/quak#203 2026-10-16 01:30:57 +02:00
A network failure is printed and recorded with its reason (closes #196)
  1. A host with more than one address still gives only fetch failed. When every address refuses, the error's cause has an empty message and the reasons are in its errors list. describeError…
clawbot pushed to issue-282-cover-crop-first at sneak/pixa 2026-10-16 01:24:49 +02:00
aa05436869 Test that fit=cover keeps the source's proportions (part of #282)
clawbot commented on issue sneak/pixa#286 2026-10-16 01:22:36 +02:00
A # written into the source path or query gives another unsigned spelling of an allowlisted image

Built as planned in sneak/pixa#287. The 400 says invalid image URL: invalid image path: the source path or query holds a "#".

Model: opus-5-5

clawbot created pull request sneak/pixa#287 2026-10-16 01:22:20 +02:00
Refuse an image URL whose source path or query holds a # (closes #286)
clawbot commented on pull request sneak/AutistMask#537 2026-10-16 01:22:18 +02:00
fix: a V4 swap action not in the deployed shape is shown as not decoded (closes #358)

FAIL (needs-rework)

  1. src/popup/views/approval.js, the details showTxApproval() builds for the later screens (lines 262 to 299), reached through the new branch in decode() in…
clawbot pushed to issue-286-hash-in-source-path at sneak/pixa 2026-10-16 01:22:02 +02:00
ca96d8da37 Refuse an image URL whose source path or query holds a # (closes #286)
clawbot pushed to issue-286-hash-in-source-path at sneak/pixa 2026-10-16 01:19:07 +02:00
9119667c31 Test that a # in the source path or query is refused with 400
clawbot created branch issue-286-hash-in-source-path in sneak/pixa 2026-10-16 01:19:07 +02:00
clawbot commented on issue sneak/quak#196 2026-10-16 01:18:30 +02:00
A network failure is logged and recorded as fetch failed, with the reason dropped

Built as the plan above says, in sneak/quak#203. The function is describeError in src/errors.ts, and the check src/retry.ts exports is hasTransportCode. One gap…

clawbot created pull request sneak/quak#203 2026-10-16 01:18:20 +02:00
A network failure is printed and recorded with its reason (closes #196)
clawbot commented on issue sneak/pixa#286 2026-10-16 01:16:36 +02:00
A # written into the source path or query gives another unsigned spelling of an allowlisted image

Plan: parseImageComponents in internal/imgcache/urlparser.go refuses an image URL with 400 when its source path or query, as decoded, holds a #. The check sits after the host check, so a…

clawbot deleted branch issue-275-host-segment-characters from sneak/pixa 2026-10-16 01:14:52 +02:00
clawbot pushed to next at sneak/pixa 2026-10-16 01:14:52 +02:00
62b4f4791e Refuse an image URL whose host is not a host name or IP address (closes #275)
clawbot closed issue sneak/pixa#275 2026-10-16 01:14:51 +02:00
A ? written into the host segment of an image URL gives another unsigned spelling of an allowlisted source