clawbot c75e942da8 Expect a Content-Security-Policy without unsafe-inline ...

The security headers test now expects script-src and style-src to
allow only 'self', and checks that the policy carries no
'unsafe-inline' at all. It fails until the login and generator pages
stop needing inline script and style.

Model: opus-5-5

2026-10-04 16:37:07 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

clientip

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

config

Abort startup on a config file pixa cannot read (closes #176)

2026-10-04 18:24:43 +02:00

database

Move migrations to internal/db/migrations (closes #96)

2026-09-29 07:42:05 +02:00

db/migrations

Make the README's storage, formats, TLS and metrics match the code (closes #74)

2026-10-04 06:24:36 +02:00

encurl

Keep max-age within an expiring image URL's lifetime (closes #63)

2026-09-29 03:51:58 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

Test metrics auth, CORS preflight, login logging and metrics (closes #79)

2026-10-04 14:39:27 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

Return and pass on request IDs, and give /v1/e/ ETag, 304 and HEAD (closes #84)

2026-10-04 12:41:54 +02:00

imageprocessor

Exit with the shutdown's code and wait for image processing (closes #86)

2026-10-04 04:59:30 +02:00

imgcache

Stop TestEvictionRunsOnPeriodicSchedule racing the evictor (closes #183)

2026-10-04 16:58:34 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

Expect a Content-Security-Policy without unsafe-inline

2026-10-04 16:37:07 +00:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

Test metrics auth, CORS preflight, login logging and metrics (closes #79)

2026-10-04 14:39:27 +02:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

Include quality and fit in the URL signature (closes #60)

2026-09-28 13:02:21 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00