user 215ddb7f72 fix: remove suffix matching from host whitelist ...

Whitelist entries now support exact host matches only. Leading dots
in patterns are stripped for backwards compatibility (.example.com
becomes an exact match for example.com). Suffix matching that would
match arbitrary subdomains is no longer supported.

Closes #27

2026-03-15 11:18:25 -07:00

..

testdata

Add failing test for AVIF decoding

2026-01-08 13:09:40 -08:00

cache_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

cache.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

divzero_test.go

fix: guard against division by zero when fetchBytes is 0

2026-02-08 15:59:51 -08:00

fetcher.go

fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings

2026-02-25 05:44:49 -08:00

imgcache.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

magic_test.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

magic.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

mock_fetcher.go

Add mock fetcher and service tests for imgcache

2026-01-08 07:39:18 -08:00

module.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

negative_cache_test.go

fix: check negative cache in Service.Get() before fetching upstream

2026-02-08 16:02:33 -08:00

processor_test.go

Suppress verbose vips logging output

2026-01-08 16:13:52 -08:00

processor.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

service_test.go

Add failing tests for ETag, HEAD requests, and conditional requests

2026-01-08 10:06:18 -08:00

service.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

signature_query_test.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

signature_test.go

Fix formatting in fetcher and signature tests

2026-01-08 03:36:00 -08:00

signature.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

sourceurl_test.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

stats_test.go

fix: correct Stats() to scan only hit/miss counts, compute HitRate properly

2026-02-08 15:59:27 -08:00

storage_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

storage.go

fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings

2026-02-25 05:44:49 -08:00

testutil_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

urlparser_test.go

Add failing tests for input dimension and path traversal validation

2026-01-08 08:48:11 -08:00

urlparser.go

Implement max input dimensions and path traversal validation

2026-01-08 08:50:18 -08:00

whitelist_test.go

test: add failing tests for removing suffix matching from whitelist

2026-03-15 11:18:01 -07:00

whitelist.go

fix: remove suffix matching from host whitelist

2026-03-15 11:18:25 -07:00