sneak 808356f142 test: allowlist_hosts must reject dot-only entries (PR #53 rework) ...

A bare "." entry becomes a HasSuffix suffix pattern that matches any
upstream written in FQDN trailing-dot form (evil.com.), effectively
disabling URL signing with one character. Failing test first, fix
follows.

2026-08-07 17:03:32 +00:00

..

config_test.go

refactor: extract signature package from imgcache (#46)

2026-08-07 17:44:00 +02:00

config_validation_test.go

test: allowlist_hosts must reject dot-only entries (PR #53 rework)

2026-08-07 17:03:32 +00:00

config.go

fix: abort startup on explicitly empty db_url instead of deriving

2026-08-07 17:03:12 +00:00