5 Commits

Author	SHA1	Message	Date
clawbot	2d805125ee	chore: update golangci-lint to v2.12.2 with canonical config (#54) ... Canonical v2-schema `.golangci.yml`, golangci-lint pins bumped to v2.12.2 in `Dockerfile` and `script/bootstrap`, and the tree brought to `0 issues.` under it. Three behaviour deltas: `Cache.StoreVariant` takes a context (cancelled requests skip the accounting row, recovered by reconciliation); `MetadataStorage.Store` no longer leaks `.tmp-*.json` on Write/Close/Rename failure (dead-defer bug fix); the `signing_key` too-short error text gained a `value too short:` prefix. Eviction-loop context cancellation deferred to #102.	2026-08-10 16:12:22 +02:00
sneak	95408e68d4	Implement max input dimensions and path traversal validation ... - Reject input images exceeding MaxInputDimension (8192px) to prevent DoS - Detect path traversal: ../, encoded variants, backslashes, null bytes	2026-01-08 08:50:18 -08:00
sneak	c964feac7e	Add failing tests for input dimension and path traversal validation ... Tests for: - ErrInputTooLarge when input image exceeds MaxInputDimension - ErrPathTraversal for ../, encoded traversal, backslashes, null bytes	2026-01-08 08:48:11 -08:00
sneak	018c280267	Add ParseImagePath for chi wildcard and upstream fetcher with SSRF protection	2026-01-08 02:59:48 -08:00
sneak	c69ddf6f61	Implement URL parser for image proxy routes	2026-01-08 02:55:05 -08:00