sneak 6209798793 Escape : and % in the signed and cached path and query (closes #247) ...

The signed data and the cache key joined host, path and query with ":"
and no escaping, so path /a:b with no query and path /a with query b:
gave the same string: a URL signed for one verified for the other, and
whichever was fetched first was served for both. Both now write each "%"
in the path and query as "%25" and each ":" as "%3A" before joining them.
A path and query holding neither are signed and keyed as before.
"Signature Specification" in README.md states the escaping.

Model: opus-5-5

2026-10-15 05:38:34 +00:00

..

testdata

Add failing test for AVIF decoding

2026-01-08 13:09:40 -08:00

cache_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

cache_usage_internal_test.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

cache.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

cachesize_internal_test.go

Count what the cache holds in the default cache_max_bytes (closes #184)

2026-10-04 19:41:49 +02:00

cachesize.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

concurrent_misses_internal_test.go

Share one fetch and transcode among concurrent misses (closes #65)

2026-10-04 01:58:48 +02:00

contentlock_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

contentlock.go

feat: cache size management and LRU eviction (closes #51) (#55)

2026-08-09 13:22:51 +02:00

divzero_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

eviction_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

eviction.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

imgcache.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

max_concurrent_processing_internal_test.go

Bound concurrent image processing and upstream fetches (closes #64)

2026-09-29 10:32:16 +02:00

metacache_internal_test.go

Keep variant content types in memory for cache hits (closes #70)

2026-09-29 12:00:10 +02:00

module.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

negative_cache_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

pendingcounts_internal_test.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

pendingcounts.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

service_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

service.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

sourceurl_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

stats_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

storage_internal_test.go

Test that a colon cannot move where the path ends and the query begins

2026-10-15 04:58:20 +00:00

storage.go

Escape : and % in the signed and cached path and query (closes #247)

2026-10-15 05:38:34 +00:00

testutil_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

urlparser_internal_test.go

Serve the format auto, chosen from the Accept header (closes #88)

2026-10-05 05:24:50 +02:00

urlparser.go

Refuse a size whose computed side exceeds the maximum (closes #241)

2026-10-13 09:44:44 +02:00

validate_internal_test.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00