sneak bcf216b61b Lower-case the image URL's host and require a signature for a port (closes #246) ...

With cdn.example.com allowlisted, CDN.Example.com and
cdn.example.com:8443 passed the allowlist too, and each spelling had its
own cache entries and its own connections under
upstream_connections_per_host. The image URL parser now lower-cases the
host and refuses one holding "@" with ErrInvalidHost (400).
ValidateRequest counts a host followed by ":", with or without a port,
as not allowlisted, so it needs a signature. That check is not in
allowlist.IsAllowed, which also matches referer_blocklist. A URL is now
signed over the lower-cased host; README.md says so.

Model: opus-5-5

2026-10-15 03:26:47 +00:00

..

testdata

Add failing test for AVIF decoding

2026-01-08 13:09:40 -08:00

cache_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

cache_usage_internal_test.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

cache.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

cachesize_internal_test.go

Count what the cache holds in the default cache_max_bytes (closes #184)

2026-10-04 19:41:49 +02:00

cachesize.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

concurrent_misses_internal_test.go

Share one fetch and transcode among concurrent misses (closes #65)

2026-10-04 01:58:48 +02:00

contentlock_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

contentlock.go

feat: cache size management and LRU eviction (closes #51) (#55)

2026-08-09 13:22:51 +02:00

divzero_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

eviction_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

eviction.go

Eviction no longer reads a whole table while requests wait on the database (closes #227)

2026-10-08 07:12:02 +02:00

imgcache.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

max_concurrent_processing_internal_test.go

Bound concurrent image processing and upstream fetches (closes #64)

2026-09-29 10:32:16 +02:00

metacache_internal_test.go

Keep variant content types in memory for cache hits (closes #70)

2026-09-29 12:00:10 +02:00

module.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

negative_cache_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

pendingcounts_internal_test.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

pendingcounts.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

service_internal_test.go

Test that the image URL's host is one spelling (part of #246)

2026-10-15 02:59:07 +00:00

service.go

Lower-case the image URL's host and require a signature for a port (closes #246)

2026-10-15 03:26:47 +00:00

sourceurl_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

stats_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

storage_internal_test.go

Remove idle host semaphores and delete .meta with its variant (closes #87)

2026-10-04 07:11:31 +02:00

storage.go

Remove idle host semaphores and delete .meta with its variant (closes #87)

2026-10-04 07:11:31 +02:00

testutil_internal_test.go

Remove the unused cache lifetime setting (closes #69)

2026-10-13 07:58:55 +02:00

urlparser_internal_test.go

Test that the image URL's host is one spelling (part of #246)

2026-10-15 02:59:07 +00:00

urlparser.go

Lower-case the image URL's host and require a signature for a port (closes #246)

2026-10-15 03:26:47 +00:00

validate_internal_test.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00