Pull Requests - pixa - git.eeqj.de

Resolve real client IP behind trusted proxies (closes #94)

check / check (push) Successful in 2m51s

Details

needs-review

#127

by clawbot was merged 2026-09-22 10:25:42 +02:00

5

fix: validate dimensions and fit mode on encrypted URLs (closes #62)

check / check (push) Successful in 2m30s

Details

needs-rebase

#126

opened 2026-09-21 22:23:07 +02:00 by clawbot

1 conflicting file

feat: blocked_networks config and extended SSRF ranges (closes #67)

check / check (push) Successful in 2m28s

Details

needs-review

#124

by clawbot was merged 2026-09-22 00:43:27 +02:00

2

Harden http.Server: slowloris timeouts and form body limit (closes #92)

check / check (push) Failing after 0s

Details

needs-review

#123

by clawbot was merged 2026-09-21 20:59:25 +02:00

1

build: run all linting in Docker via Dockerfile.lint (closes #104)

check / check (push) Failing after 0s

Details

needs-rework

#122

opened 2026-09-21 20:26:02 +02:00 by clawbot

6

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91)

check / check (push) Successful in 2m48s

Details

needs-review

#121

by clawbot was merged 2026-09-21 20:43:13 +02:00

1

Take the image signing key from PIXA_SIGNING_KEY and refuse the example placeholder (closes #110)

check / check (push) Failing after 1s

Details

needs-review

#120

by clawbot was merged 2026-09-21 21:59:25 +02:00

5

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)

check / check (push) Failing after 1s

Details

needs-review

#119

by clawbot was merged 2026-09-21 19:59:27 +02:00

1

next -> main (1.0.0 milestone)

check / check (push) Successful in 2m31s

Details

#118

opened 2026-09-21 19:26:34 +02:00 by clawbot

main

CSRF protection on the login and URL-generator forms (closes #93)

check / check (push) Failing after 1s

Details

needs-review

#117

by clawbot was merged 2026-09-21 19:26:18 +02:00

3

feat: include quality and fit in the URL signature (closes #60)

check / check (push) Failing after 1s

Details

needs-rework

#116

opened 2026-09-21 09:56:38 +02:00 by clawbot

3

fix: script/test conditional-verbose-rerun with -cover (closes #59)

check / check (push) Successful in 2m29s

Details

needs-review

#115

by clawbot was merged 2026-09-21 19:43:22 +02:00

3

docs: update TODO.md Workflow and Status for the next branching model (closes #106)

check / check (push) Successful in 3m23s

Details

needs-review

#114

by clawbot was merged 2026-09-21 19:59:52 +02:00

3

next -> main (1.0.0 milestone)

check / check (push) Successful in 4s

Details

#105

by clawbot was merged 2026-09-21 09:31:55 +02:00

main

feat: cache size management and LRU eviction (closes #51)

check / check (push) Successful in 2m43s

Details

merge-ready

#55

by clawbot was merged 2026-08-09 13:22:51 +02:00

main

feature/cache-size-eviction

10

Update golangci-lint to v2.12.2 with canonical config

check / check (push) Successful in 2m49s

Details

merge-ready

#54

by clawbot was merged 2026-08-10 16:12:23 +02:00

22

feat: validate configuration on startup, fail fast on bad config (closes #52)

check / check (push) Successful in 1m48s

Details

merge-ready

#53

by clawbot was merged 2026-08-07 22:39:40 +02:00

main

feature/config-validation

6

docs: record manual test pass of auth and encrypted URL flows (closes #49)

check / check (push) Successful in 1m34s

Details

merge-ready

#50

by clawbot was merged 2026-08-07 18:44:01 +02:00

main

test/manual-auth-flow-pass

1

fix: set Secure/HttpOnly/SameSite on session cookies (closes #47)

check / check (push) Successful in 1m48s

Details

merge-ready

#48

by clawbot was merged 2026-08-07 17:41:03 +02:00

main

fix/gosec-findings

4

refactor: extract signature package from imgcache

check / check (push) Successful in 1m38s

Details

merge-ready

#46

by clawbot was merged 2026-08-07 17:44:00 +02:00

main

refactor/extract-signature

7