clawbot c9a8b926db Refuse image requests whose Referer is on referer_blocklist (closes #90) ...

A new setting, referer_blocklist (PIXA_REFERER_BLOCKLIST), lists hosts
written and matched as allowlist_hosts are, with the same matcher and the
same entry check; a bad entry aborts startup naming the setting and the
entry. Both image routes check the Referer first and answer 403 with the
JSON error, so a blocked request fetches nothing and is refused whether or
not the image is cached. No Referer, or one that does not parse as a URL
with a host, is served; README.md and config.example.yml say this makes the
list easy to get around. The CIDR-list entry reader is renamed listEntries
now that host lists use it too.

Model: opus-5-5

2026-10-04 19:08:30 +00:00

..

Caddyfile

Write the deployment guide and an example Caddy config (closes #89)

2026-10-04 15:08:03 +02:00

config.example.yml

Refuse image requests whose Referer is on referer_blocklist (closes #90)

2026-10-04 19:08:30 +00:00