sneak fa7f28c62b fix: refuse the example placeholder signing_key at startup ...

Reject the exact config.example.yml placeholder in validate() with an
error naming signing_key, so a container or file-based deployment that
never changed it fails fast instead of signing URLs with a public key.
The signing-key checks move into a validateSigningKey helper, keeping
validate() within the cyclomatic-complexity limit.

Model: opus-4-8

2026-09-21 18:46:11 +00:00

..

allowlist

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

config

fix: refuse the example placeholder signing_key at startup

2026-09-21 18:46:11 +00:00

database

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

encurl

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

globals

Consolidate appname to internal/globals as a constant (#34)

2026-03-20 07:04:54 +01:00

handlers

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

healthcheck

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

httpfetcher

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78)

2026-09-21 19:59:26 +02:00

imageprocessor

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imgcache

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

logger

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

magic

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

middleware

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91)

2026-09-21 20:43:13 +02:00

seal

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

server

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

session

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

signature

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

static

Add static files and HTML templates for web UI

2026-01-08 07:38:09 -08:00

templates

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00