5 Commits

Author	SHA1	Message	Date
sneak	23506df609	chore: update golangci-lint to v2.12.2 with canonical config ... Replace .golangci.yml with the canonical v2-schema config (default: all minus six disabled linters, lll 88, tests included) and bump every golangci-lint pin to v2.12.2: - Dockerfile: golangci/golangci-lint:v2.12.2-alpine (hash-pinned) - script/bootstrap: GOLANGCI_LINT_VERSION 2.12.2 with new linux-amd64/arm64 release-archive sha256 pins Fix all 747 findings the stricter config surfaces, with no behavior changes: t.Parallel() throughout the test suite, static sentinel errors and errors.Is comparisons, checked error returns, context propagation (contextcheck/noctx), 88-column wrapping, extracted constants and helpers for goconst/dupl/funlen/cyclop, exhaustive switch cases replicating existing defaults, and white-box test files renamed to *_internal_test.go for testpackage. Three nolint:tagliatelle directives preserve the existing snake_case JSON wire and on-disk metadata formats.	2026-08-07 17:10:27 +00:00
sneak	95408e68d4	Implement max input dimensions and path traversal validation ... - Reject input images exceeding MaxInputDimension (8192px) to prevent DoS - Detect path traversal: ../, encoded variants, backslashes, null bytes	2026-01-08 08:50:18 -08:00
sneak	c964feac7e	Add failing tests for input dimension and path traversal validation ... Tests for: - ErrInputTooLarge when input image exceeds MaxInputDimension - ErrPathTraversal for ../, encoded traversal, backslashes, null bytes	2026-01-08 08:48:11 -08:00
sneak	018c280267	Add ParseImagePath for chi wildcard and upstream fetcher with SSRF protection	2026-01-08 02:59:48 -08:00
sneak	c69ddf6f61	Implement URL parser for image proxy routes	2026-01-08 02:55:05 -08:00