sneak/pixa
1
0
Fork 0
Code Issues 50 Pull Requests 5 Actions Packages Projects Releases Wiki Activity
Files
3bb992fc1b7a88385f6d83d9e291c44d00a96382
pixa/internal
T
History
sneak 3bb992fc1b test: reject the config.example.yml placeholder signing_key 
The placeholder is 45 characters, so it passes the length check and a
deployment could unknowingly sign URLs with a key that is public in
this repository. Add a failing validation case (and the placeholder
constant it references); the rejection follows.

Model: opus-4-8
2026-09-21 19:28:47 +00:00
..
allowlist
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
config
test: reject the config.example.yml placeholder signing_key
2026-09-21 19:28:47 +00:00
database
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
encurl
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
globals
Consolidate appname to internal/globals as a constant (#34)
2026-03-20 07:04:54 +01:00
handlers
Harden http.Server: slowloris timeouts and form body limit (closes #92)
2026-09-21 20:59:24 +02:00
healthcheck
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
httpfetcher
test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)
2026-09-21 19:59:26 +02:00
imageprocessor
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
imgcache
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
logger
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
magic
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
middleware
feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91)
2026-09-21 20:43:13 +02:00
seal
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
server
Harden http.Server: slowloris timeouts and form body limit (closes #92)
2026-09-21 20:59:24 +02:00
session
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
signature
next -> main (1.0.0 milestone) (#105)
2026-09-21 09:31:54 +02:00
static
Add static files and HTML templates for web UI
2026-01-08 07:38:09 -08:00
templates
CSRF protection on the login and URL-generator forms (closes #93)
2026-09-21 19:26:18 +02:00