sneak 90b2f6fa66 test: add failing test for evictSourceBlob unlink-vs-store TOCTOU ...

Adds an instrumentation seam (evictSourceBlobTestHook, fired after the
row-deletion transaction commits and before the content file is
unlinked) and a test that pauses eviction there while a concurrent
StoreSource for identical content bytes races it. Currently red: the
store completes immediately instead of being excluded, which is
exactly the window the review flagged between evictSourceBlob's commit
and its unlink.

2026-08-09 00:45:39 +00:00

..

allowlist

refactor: extract whitelist package from internal/imgcache (#41)

2026-03-25 20:44:56 +01:00

config

feat: add cache_max_bytes config key with statfs-derived default

2026-08-07 21:02:08 +00:00

database

fix: fold cache eviction schema into 001_initial_schema.sql

2026-08-09 00:43:21 +00:00

encurl

Add 'Never' expiry option for encrypted URLs

2026-01-08 11:08:11 -08:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

feat: DB-tracked cache size accounting with background LRU eviction

2026-08-07 21:06:03 +00:00

healthcheck

Rename unused parameters to _ to satisfy linter

2026-01-08 02:27:45 -08:00

httpfetcher

refactor: extract httpfetcher package from imgcache (#43)

2026-07-25 12:26:18 +02:00

imageprocessor

Bound imageprocessor.Process input read to prevent unbounded memory use (#37)

2026-03-20 07:01:15 +01:00

imgcache

test: add failing test for evictSourceBlob unlink-vs-store TOCTOU

2026-08-09 00:45:39 +00:00

logger

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

magic

refactor: extract magic byte detection into internal/magic package (#42)

2026-04-07 00:41:48 +02:00

middleware

Fix logging: add response_bytes to middleware, cache_key to handler

2026-01-08 13:05:10 -08:00

seal

Add seal package for authenticated encryption

2026-01-08 07:37:53 -08:00

server

Change encrypted URL format to /v1/e/{token}/img.{ext}

2026-01-08 16:14:01 -08:00

session

fix: set Secure/HttpOnly/SameSite on session cookies (closes #47) (#48)

2026-08-07 17:41:03 +02:00

signature

refactor: extract signature package from imgcache (#46)

2026-08-07 17:44:00 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

Add AVIF option to URL generator

2026-01-08 13:12:51 -08:00