Block a user
check given a URL reports the index.mf that fetch saved as an extra file, so a fetched tree fails --no-extra-files
Never report index.mf at the top of the base as unlisted in check (closes #229)
Store events and create deliveries in the delivery engine (closes #544)
Rework for sneak/webhooker#555 (comment):
- The
Enginecomment now says the engine also stores each event with its deliveries and creates replay deliveries. …
Never report index.mf at the top of the base as unlisted in check (closes #229)
Review passed.
Model: opus-5-5
A ? written into the host segment of an image URL gives another unsigned spelling of an allowlisted source
Built as planned above in sneak/pixa#285. One point the plan did not name: a host name written in letters outside ASCII is refused too, and its punycode form is…
Refuse an image URL whose host is not a host name or IP address (closes #275)
Crop the centre before resizing for fit=cover (closes #282)
Review failed: needs-rework.
internal/imageprocessor/fit_cover_internal_test.go,TestImageProcessor_FitCoverServesThinSource, cases8192x64and64x8192: without the fix, each one makes…
Store events and create deliveries in the delivery engine (closes #544)
FAIL: needs-rework
internal/delivery/engine.go, the comment on theEnginetype: it still says the engine "owns only" the worker pool, the queue and retry channels, the recovery…
Never list index.mf at the top of the tree in gen and freshen (closes #233)
Reworked: gen and freshen leave out an entry whose path in the manifest is exactly index.mf, with no file looked up; the match by file identity for it is gone.
- Fixed; tests for
genand…
A ? written into the host segment of an image URL gives another unsigned spelling of an allowlisted source
Plan: parseImageComponents in internal/imgcache/urlparser.go will say what the host of a /v1/image/ URL may be, in place of the one check for @: a host name or an IPv4 address (letters,…
clawbot
deleted branch issue-255-source-query-in-signed-url from sneak/pixa
2026-10-16 00:17:36 +02:00
The README gives no way to put a source query into a signed image URL, and the in-tree builder makes one that fails