clawbot e1f6155322 Refuse SVG at the fetcher and never save an unknown input as JPEG (part of #68) ...

The fetcher no longer accepts image/svg+xml, so an SVG source gets the
refusal every unaccepted upstream type gets, which both image routes now
answer with 415 where they answered 500. orig of an input the processor
cannot name is ErrUnsupportedInputFormat, also answered 415, where it
was saved as JPEG. README.md drops SVG from the source formats and lists
the 415.

Model: opus-5-5

2026-10-13 01:51:56 +00:00

..

auth_clientip_internal_test.go

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

auth_csrf_internal_test.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

auth_generate_internal_test.go

Validate dimensions and fit mode on encrypted URLs (closes #62)

2026-09-28 15:24:32 +02:00

auth_login_log_internal_test.go

Test metrics auth, CORS preflight, login logging and metrics (closes #79)

2026-10-04 14:39:27 +02:00

auth_session_internal_test.go

Test that a URL made on the generator page with a ttl expires (closes #199)

2026-10-04 22:42:03 +02:00

auth.go

Serve JPEG XL when a request names no format (closes #222)

2026-10-08 12:49:56 +02:00

bodylimit_internal_test.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

bodylimit.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

cache_max_bytes_internal_test.go

Count what the cache holds in the default cache_max_bytes (closes #184)

2026-10-04 19:41:49 +02:00

csrf.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

fetcher_internal_test.go

Test the image proxy flow end to end (closes #80)

2026-10-04 23:24:46 +02:00

format_auto_internal_test.go

Serve the format auto, chosen from the Accept header (closes #88)

2026-10-05 05:24:50 +02:00

format_auto.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

handlers_internal_test.go

Refuse an empty fit on /v1/image/ with 400 (closes #139)

2026-09-28 18:07:11 +02:00

handlers.go

Keep counts not written by the request's deadline in memory (closes #224)

2026-10-13 03:07:23 +02:00

healthcheck.go

Add doc comment to HandleHealthCheck method

2026-01-08 02:28:30 -08:00

image_cache_control_internal_test.go

Return and pass on request IDs, and give /v1/e/ ETag, 304 and HEAD (closes #84)

2026-10-04 12:41:54 +02:00

image_errors_internal_test.go

Test the image route's signature check and error answers (closes #76)

2026-10-04 13:58:29 +02:00

image_signature_internal_test.go

Keep max-age within an expiring image URL's lifetime (closes #63)

2026-09-29 03:51:58 +02:00

image.go

Refuse SVG at the fetcher and never save an unknown input as JPEG (part of #68)

2026-10-13 01:51:56 +00:00

imageenc_internal_test.go

Return and pass on request IDs, and give /v1/e/ ETag, 304 and HEAD (closes #84)

2026-10-04 12:41:54 +02:00

imageenc_token_internal_test.go

Test logging in, logging out, the URL generator and /v1/e/ tokens (closes #77)

2026-10-04 19:24:39 +02:00

imageenc.go

Refuse SVG at the fetcher and never save an unknown input as JPEG (part of #68)

2026-10-13 01:51:56 +00:00

jpegxl_default_internal_test.go

Serve JPEG XL when a request names no format (closes #222)

2026-10-08 12:49:56 +02:00

jpegxl_internal_test.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

referer_blocklist_internal_test.go

Refuse image requests whose Referer is on referer_blocklist (closes #90)

2026-10-04 22:24:50 +02:00

request_id_internal_test.go

Return and pass on request IDs, and give /v1/e/ ETag, 304 and HEAD (closes #84)

2026-10-04 12:41:54 +02:00

robots_healthcheck_internal_test.go

Test the image route's signature check and error answers (closes #76)

2026-10-04 13:58:29 +02:00

server_busy_internal_test.go

Bound concurrent image processing and upstream fetches (closes #64)

2026-09-29 10:32:16 +02:00

unsupported_source_internal_test.go

Test that an SVG source and orig of an unnamed input are refused

2026-10-13 01:51:55 +00:00