3 Commits

Include renames

Author	SHA1	Message	Date
sneak	1aacf6cbf6	Test that both image routes fetch an IPv6 source host without a port ... A router test against a test upstream that records each request: an IPv6 source host written with and without a port, through a /v1/image/ URL with a signature and through an encrypted URL. A public address must be fetched, a private one refused with 403 without reaching the upstream. The cases without a port fail: each answers 500. Model: opus-5-5	2026-10-16 02:49:36 +00:00
clawbot	6d271d4617	Make one image URL per source on the generator page for host case and an empty path (closes #293) ... The generator page passed the source host and path into the encrypted URL as entered, so a host spelled in another letter case, or a source with no path against the same source with /, made separate cache keys and fetched one upstream image twice. The page now lower-cases the source host, as /v1/image/ does, and writes an empty source path as /, before it builds the encrypted URL. The checks the page gained for #288 still hold. Model: opus-5-5	2026-10-16 04:04:19 +02:00
clawbot	4a4bc9758f	Fetch the source path and query URL-encoded, not joined as text (closes #288) ... The source URL was built by joining the decoded path and query as text, so a space in the query reached the upstream raw and failed with 502, 100%25.png made a URL Go could not parse and answered 401, and %20 and %2520 fetched the same path under different cache keys. The source URL is now built with net/url, so each decoded path and query is one upstream request matching its signature and cache key; the query encodes the characters a browser encodes, ' included. The generator page compares what pixa would fetch with the URL as entered, and answers 400 with the URL to use when they differ, or for a user name and password or a .. segment. Model: opus-5-5	2026-10-16 03:31:15 +02:00