2 Commits

Include renames

Author	SHA1	Message	Date
Lucas WintherandClaude Opus 5.5	baa3476b73	fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host ... From the final review: proxied archived HTML could run on our origin and read a remembered token; /api/upload accepted any Wayback URL and GIF-prefixed bytes; the origin check broke behind a TLS proxy; one unreadable snapshot could fail a run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-15 01:49:52 +02:00
Lucas WintherandClaude Opus 5.5	2debb3d513	feat(server): web-standard handler (config, allowlisted fetch proxy, upload, covers, assets) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 23:39:19 +02:00