Commit Graph
2 Commits
Author SHA1 Message Date
sneak 5506858834 Test the generator refusals and a "'" in the source query
check / check (push) Canceled after 0s
Through the router: a source query holding "'" must reach the upstream
as %27. The generator page must answer 400, show the URL pixa would
fetch and make no encrypted URL for a source path holding %2F next to a
space, a "|" or a letter outside ASCII, and for a source URL holding a
user name and password. It must also refuse a source path holding a ".."
segment, as /v1/image/ does. These fail on the branch; the fix follows.

Model: opus-5-5
2026-10-16 00:56:05 +00:00
sneak af5ce499b9 Test that the source URL is fetched with its path and query encoded
Through the router, against a test upstream that records each request
it receives: a space in the source query, 100%25.png, the source paths
written my%20cat.png and my%2520cat.png, one source query written two
ways, and the generator page with %20, %25 and %23 in the source URL,
and with %2F in its path, which the page must refuse. These fail on
next; the fix for #288 follows.

Model: opus-5-5
2026-10-16 00:47:13 +00:00