Pull Requests - pixa - git.eeqj.de

Resolve real client IP behind trusted proxies (closes #94)

check / check (push) Successful in 2m51s

Details

needs-review

#127

by clawbot was merged 2026-09-22 10:25:42 +02:00

5

feat: blocked_networks config and extended SSRF ranges (closes #67)

check / check (push) Successful in 2m28s

Details

needs-review

#124

by clawbot was merged 2026-09-22 00:43:27 +02:00

2

Harden http.Server: slowloris timeouts and form body limit (closes #92)

check / check (push) Failing after 0s

Details

needs-review

#123

by clawbot was merged 2026-09-21 20:59:25 +02:00

1

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91)

check / check (push) Successful in 2m48s

Details

needs-review

#121

by clawbot was merged 2026-09-21 20:43:13 +02:00

1

Take the image signing key from PIXA_SIGNING_KEY and refuse the example placeholder (closes #110)

check / check (push) Failing after 1s

Details

needs-review

#120

by clawbot was merged 2026-09-21 21:59:25 +02:00

5

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)

check / check (push) Failing after 1s

Details

needs-review

#119

by clawbot was merged 2026-09-21 19:59:27 +02:00

1

CSRF protection on the login and URL-generator forms (closes #93)

check / check (push) Failing after 1s

Details

needs-review

#117

by clawbot was merged 2026-09-21 19:26:18 +02:00

3

fix: script/test conditional-verbose-rerun with -cover (closes #59)

check / check (push) Successful in 2m29s

Details

needs-review

#115

by clawbot was merged 2026-09-21 19:43:22 +02:00

3

docs: update TODO.md Workflow and Status for the next branching model (closes #106)

check / check (push) Successful in 3m23s

Details

needs-review

#114

by clawbot was merged 2026-09-21 19:59:52 +02:00

3

next -> main (1.0.0 milestone)

check / check (push) Successful in 4s

Details

#105

by clawbot was merged 2026-09-21 09:31:55 +02:00

main

feat: cache size management and LRU eviction (closes #51)

check / check (push) Successful in 2m43s

Details

merge-ready

#55

by clawbot was merged 2026-08-09 13:22:51 +02:00

main

feature/cache-size-eviction

10

Update golangci-lint to v2.12.2 with canonical config

check / check (push) Successful in 2m49s

Details

merge-ready

#54

by clawbot was merged 2026-08-10 16:12:23 +02:00

22

feat: validate configuration on startup, fail fast on bad config (closes #52)

check / check (push) Successful in 1m48s

Details

merge-ready

#53

by clawbot was merged 2026-08-07 22:39:40 +02:00

main

feature/config-validation

6

docs: record manual test pass of auth and encrypted URL flows (closes #49)

check / check (push) Successful in 1m34s

Details

merge-ready

#50

by clawbot was merged 2026-08-07 18:44:01 +02:00

main

test/manual-auth-flow-pass

1

fix: set Secure/HttpOnly/SameSite on session cookies (closes #47)

check / check (push) Successful in 1m48s

Details

merge-ready

#48

by clawbot was merged 2026-08-07 17:41:03 +02:00

main

fix/gosec-findings

4

refactor: extract signature package from imgcache

check / check (push) Successful in 1m38s

Details

merge-ready

#46

by clawbot was merged 2026-08-07 17:44:00 +02:00

main

refactor/extract-signature

7

scripts-to-rule-them-all

check / check (push) Successful in 1m45s

Details

#45

by sneak was merged 2026-07-07 02:14:03 +02:00

main

scripts-to-rule-them-all

Update TODO.md: standard structure and Workflow section

check / check (push) Successful in 1m42s

Details

#44

by sneak was merged 2026-07-06 21:20:56 +02:00

main

TODO

refactor: extract httpfetcher package from imgcache

check / check (push) Successful in 1m39s

Details

merge-ready

#43

by clawbot was merged 2026-07-25 12:26:18 +02:00

main

refactor/extract-httpfetcher

2

refactor: extract magic byte detection into internal/magic package

check / check (push) Successful in 52s

Details

merge-ready

#42

by clawbot was merged 2026-04-07 00:41:48 +02:00

main

refactor/extract-magic-package

1