Lucas WintherandClaude Opus 5.5 baa3476b73 fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host ...

From the final review: proxied archived HTML could run on our origin and read a
remembered token; /api/upload accepted any Wayback URL and GIF-prefixed bytes; the
origin check broke behind a TLS proxy; one unreadable snapshot could fail a run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 01:49:52 +02:00

..

catbox.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

direct.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

host.ts

fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host

2026-10-15 01:49:52 +02:00

litterbox.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

registry.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

rehost.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

server.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00