sneak 4900837068 Test blocked_networks on both forms of an IPv6 source host holding IPv4 ...

Both image routes: [::203.0.113.5] must answer 403 when blocked_networks
lists ::/96, and [::ffff:203.0.113.5] when it lists ::ffff:0:0/96 or
203.0.113.0/24. The ::/96 and ::ffff:0:0/96 cases fail on this branch:
isBlockedIP matches such an address only by the IPv4 address it holds.

Model: opus-5-5

2026-10-16 04:14:20 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

app

Move pixad's startup from cmd/pixad into internal/app (closes #206)

2026-10-05 01:07:47 +02:00

clientip

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

config

Escape state_dir in the db_url derived from it (closes #290)

2026-10-16 04:37:54 +02:00

database

Queue SQLite writes on one connection so none fails as locked (closes #223)

2026-10-08 04:50:31 +02:00

db/migrations

Logging out ends every login session (closes #256)

2026-10-15 20:44:44 +02:00

encurl

Serve JPEG XL when a request names no format (closes #222)

2026-10-08 12:49:56 +02:00

globals

Move pixad's startup from cmd/pixad into internal/app (closes #206)

2026-10-05 01:07:47 +02:00

handlers

Make one image URL per source on the generator page for host case and an empty path (closes #293)

2026-10-16 04:04:19 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299)

2026-10-16 03:43:55 +00:00

imageprocessor

Keep a side computed for a size with one side 0 at 1 or more (closes #283)

2026-10-16 04:17:59 +02:00

imgcache

Keep a side computed for a size with one side 0 at 1 or more (closes #283)

2026-10-16 04:17:59 +02:00

loadtestorigin

Add script/loadtest to measure throughput, latency and memory (closes #81)

2026-10-05 02:58:41 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

middleware

Label request metrics with standard HTTP methods only (closes #274)

2026-10-15 21:47:11 +02:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

Test blocked_networks on both forms of an IPv6 source host holding IPv4

2026-10-16 04:14:20 +00:00

session

Logging out ends every login session (closes #256)

2026-10-15 20:44:44 +02:00

signature

Document how a source query goes into an image URL, and accept it (closes #255)

2026-10-16 00:17:33 +02:00

static

Logging out ends every login session (closes #256)

2026-10-15 20:44:44 +02:00

templates

Logging out ends every login session (closes #256)

2026-10-15 20:44:44 +02:00