Labels Milestones New Pull Request

0 Open 110 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

critical

merge-ready

needs-checks

needs-rebase

needs-review

needs-rework

Milestone

All milestones No milestones

Open milestones

1.0.0 1.1

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

clawbot sneak (Jeffrey Paul)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 110 Closed

Label

Clear labels

critical

merge-ready

needs-checks

needs-rebase

needs-review

needs-rework

Milestone

No milestone

Open milestones

1.0.0

1.1

Projects

Clear projects

Assignee

Clear assignees

clawbot

sneak

Resolve real client IP behind trusted proxies (closes #94) needs-review

#127

by clawbot was merged 2026-09-22 10:25:42 +02:00

next

issue-94-trusted-proxies

5

feat: blocked_networks config and extended SSRF ranges (closes #67) needs-review

#124

by clawbot was merged 2026-09-22 00:43:27 +02:00

next

issue-67-blocked-networks

2

Harden http.Server: slowloris timeouts and form body limit (closes #92) needs-review

#123

by clawbot was merged 2026-09-21 20:59:25 +02:00

next

issue-92-server-hardening

1

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91) needs-review

#121

by clawbot was merged 2026-09-21 20:43:13 +02:00

next

issue-91-security-headers

1

Take the image signing key from PIXA_SIGNING_KEY and refuse the example placeholder (closes #110) needs-review

#120

by clawbot was merged 2026-09-21 21:59:25 +02:00

next

issue-110-docker-config-signing-key

5

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78) needs-review

#119

by clawbot was merged 2026-09-21 19:59:27 +02:00

next

issue-78-httpfetcher-ssrf-tests

1

CSRF protection on the login and URL-generator forms (closes #93) needs-review

#117

by clawbot was merged 2026-09-21 19:26:18 +02:00

next

issue-93-csrf

3

fix: script/test conditional-verbose-rerun with -cover (closes #59) needs-review

#115

by clawbot was merged 2026-09-21 19:43:22 +02:00

next

issue-59-test-conditional-verbose

3

docs: update TODO.md Workflow and Status for the next branching model (closes #106) needs-review

#114

by clawbot was merged 2026-09-21 19:59:52 +02:00

next

issue-106-todo-next-workflow

3

feat: split Dockerfile into dedicated lint and build stages needs-review

#22

by clawbot was closed 2026-03-02 09:06:40 +01:00

main

fix/20-split-dockerfile

1