Update TODO.md with completed core features
This commit is contained in:
14
TODO.md
14
TODO.md
@@ -17,13 +17,13 @@ A single linear checklist of tasks to implement the complete pixa caching image
|
|||||||
- [x] Verify basic server starts and healthcheck works
|
- [x] Verify basic server starts and healthcheck works
|
||||||
|
|
||||||
## Core Image Proxy Features
|
## Core Image Proxy Features
|
||||||
- [ ] Implement URL parsing for `/v1/image/<host>/<path>/<size>.<format>`
|
- [x] Implement URL parsing for `/v1/image/<host>/<path>/<size>.<format>`
|
||||||
- [ ] Implement upstream HTTP client with TLS verification
|
- [x] Implement upstream HTTP client with TLS verification
|
||||||
- [ ] Implement SSRF protection (block private/internal IPs)
|
- [x] Implement SSRF protection (block private/internal IPs)
|
||||||
- [ ] Implement source host whitelist checking
|
- [x] Implement source host whitelist checking
|
||||||
- [ ] Implement HMAC-SHA256 signature generation
|
- [x] Implement HMAC-SHA256 signature generation
|
||||||
- [ ] Implement HMAC-SHA256 signature verification
|
- [x] Implement HMAC-SHA256 signature verification
|
||||||
- [ ] Implement signature expiration checking
|
- [x] Implement signature expiration checking
|
||||||
- [ ] Implement upstream fetch with timeout and size limits
|
- [ ] Implement upstream fetch with timeout and size limits
|
||||||
- [ ] Implement Content-Type validation (whitelist MIME types)
|
- [ ] Implement Content-Type validation (whitelist MIME types)
|
||||||
- [ ] Implement magic byte verification
|
- [ ] Implement magic byte verification
|
||||||
|
|||||||
Reference in New Issue
Block a user