clawbot 351b132862 Test that an origin with a * inside aborts startup (closes #61) ...

Failing cases for access_control_allow_origin set to https://*,
https://*.example.com and https://*example.com. The CORS middleware
reads a * inside an origin as a pattern, so these would let other sites
read responses; each must abort startup naming the key and the value.

Model: opus-5-5

2026-09-28 19:51:14 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

clientip

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

config

Test that an origin with a * inside aborts startup (closes #61)

2026-09-28 19:51:14 +00:00

database

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

encurl

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

Add the four settings the README documented but pixa lacked (closes #61)

2026-09-28 19:51:14 +00:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

feat: blocked_networks config and extended SSRF ranges (closes #67)

2026-09-22 00:43:27 +02:00

imageprocessor

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imgcache

Refuse an unparseable exp with 400; log swallowed cache errors (closes #72)

2026-09-28 19:59:39 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

Add the four settings the README documented but pixa lacked (closes #61)

2026-09-28 19:51:14 +00:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

Add the four settings the README documented but pixa lacked (closes #61)

2026-09-28 19:51:14 +00:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

Include quality and fit in the URL signature (closes #60)

2026-09-28 13:02:21 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00