clawbot 547bdf11ef Read a trusted_proxies entry in the IPv4-mapped form as its IPv4 range (closes #303) ...

The client address is matched against trusted_proxies as the IPv4 address
an IPv4-mapped address holds, so an entry such as ::ffff:10.0.0.0/104
trusted nothing. parseCIDRList, which reads both trusted_proxies and
blocked_networks, now keeps such an entry as the IPv4 range it covers and
refuses one shorter than /96 naming the setting it reads.
parseBlockedNetworks, which did this for blocked_networks alone, is gone.

Model: opus-5-5

2026-10-19 02:35:21 +00:00

..

blocked_networks_internal_test.go

Read a blocked_networks entry in the IPv4-mapped form as its IPv4 range (closes #301)

2026-10-19 03:00:43 +02:00

cache_max_bytes_internal_test.go

Count what the cache holds in the default cache_max_bytes (closes #184)

2026-10-04 19:41:49 +02:00

concurrency_limits_internal_test.go

Default max_concurrent_processing to half the CPUs pixa sees (closes #242)

2026-10-15 23:07:22 +02:00

config_internal_test.go

Allowlist no host in the example config (closes #249)

2026-10-15 06:26:23 +02:00

config_validation_internal_test.go

Escape state_dir in the db_url derived from it (closes #290)

2026-10-16 04:37:54 +02:00

config.go

Read a trusted_proxies entry in the IPv4-mapped form as its IPv4 range (closes #303)

2026-10-19 02:35:21 +00:00

env_internal_test.go

Limit each client's requests to the image routes (closes #236)

2026-10-13 01:36:18 +02:00

image_requests_per_minute_internal_test.go

Limit each client's requests to the image routes (closes #236)

2026-10-13 01:36:18 +02:00

referer_blocklist_internal_test.go

Refuse image requests whose Referer is on referer_blocklist (closes #90)

2026-10-04 22:24:50 +02:00

trusted_proxies_internal_test.go

Test that a trusted_proxies entry in the IPv4-mapped form is read as its IPv4 range

2026-10-19 02:34:35 +00:00