Files
pixa/internal
sneak 83fa22871e fix: reject allowlist_hosts entries containing no hostname labels
Entries consisting only of dots (".", "..") are now a startup error
naming the key and entry. Previously a bare "." passed validation and
became a suffix pattern matching every trailing-dot FQDN upstream,
bypassing URL signing.
2026-08-07 17:03:50 +00:00
..