sneak 83fa22871e fix: reject allowlist_hosts entries containing no hostname labels ...

Entries consisting only of dots (".", "..") are now a startup error
naming the key and entry. Previously a bare "." passed validation and
became a suffix pattern matching every trailing-dot FQDN upstream,
bypassing URL signing.

2026-08-07 17:03:50 +00:00

..

config_test.go

refactor: extract signature package from imgcache (#46)

2026-08-07 17:44:00 +02:00

config_validation_test.go

test: allowlist_hosts must reject dot-only entries (PR #53 rework)

2026-08-07 17:03:32 +00:00

config.go

fix: reject allowlist_hosts entries containing no hostname labels

2026-08-07 17:03:50 +00:00