5 Commits

Include renames

Author	SHA1	Message	Date
clawbot	04b5db6fbf	next -&gt; main (1.0.0 milestone) (#105) ... Accumulating milestone branch. One squashed commit per closed issue; `next` is kept green and mergeable to `main` at any time without notice. Landed so far: - `chore: update golangci-lint to v2.12.2 with canonical config` (#54) — canonical v2-schema `.golangci.yml`, pins bumped in `Dockerfile` and `script/bootstrap`, tree at `0 issues.`. Three behaviour deltas are recorded in that PR's body: `Cache.StoreVariant` takes a context, `MetadataStorage.Store` no longer leaks temp files on failure, and the `signing_key` too-short error text gained a `value too short:` prefix. Sequencing for the milestone is tracked in #103. Reviewed-on: #105 Co-authored-by: clawbot <clawbot@noreply.example.org>	2026-09-21 09:31:54 +02:00
sneak	95408e68d4	Implement max input dimensions and path traversal validation ... - Reject input images exceeding MaxInputDimension (8192px) to prevent DoS - Detect path traversal: ../, encoded variants, backslashes, null bytes	2026-01-08 08:50:18 -08:00
sneak	c964feac7e	Add failing tests for input dimension and path traversal validation ... Tests for: - ErrInputTooLarge when input image exceeds MaxInputDimension - ErrPathTraversal for ../, encoded traversal, backslashes, null bytes	2026-01-08 08:48:11 -08:00
sneak	018c280267	Add ParseImagePath for chi wildcard and upstream fetcher with SSRF protection	2026-01-08 02:59:48 -08:00
sneak	c69ddf6f61	Implement URL parser for image proxy routes	2026-01-08 02:55:05 -08:00