Files
pixa/internal
sneak 42afa539de
check / check (push) Waiting to run
Refuse brackets around anything but an IPv6 address in an image URL host
The host check accepted any hex digits, : and . in brackets, so a host
such as [203.0.113.5] or [abc] got through it, and Go's URL parser then
refused the source URL, which the route answered with 401. The text in
brackets must now parse as an IPv6 address, as Go's URL parser asks, or
the host is refused with 400. The comment above the check now says only
what is true of it.

Model: opus-5-5
2026-10-15 22:55:37 +00:00
..