Lucas WintherandClaude Opus 5.5 baa3476b73 fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host ...

From the final review: proxied archived HTML could run on our origin and read a
remembered token; /api/upload accepted any Wayback URL and GIF-prefixed bytes; the
origin check broke behind a TLS proxy; one unreadable snapshot could fail a run.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-15 01:49:52 +02:00

..

fixtures

test: keep fixtures byte-exact (no line-ending conversion)

2026-10-14 23:36:04 +02:00

helpers

feat(core): merge, dedupe, compare with MangaBaka, pick the default, write notes

2026-10-14 23:37:48 +02:00

boundaries.test.ts

chore: scaffold Bun + TypeScript with core boundary test; record verified commands

2026-10-14 23:34:18 +02:00

covers.test.ts

feat(core): merge, dedupe, compare with MangaBaka, pick the default, write notes

2026-10-14 23:37:48 +02:00

fixtures.test.ts

test: capture Webtoons, Wayback and MangaBaka fixtures

2026-10-14 23:35:58 +02:00

gm.test.ts

feat(userscript): GM_xmlhttpRequest transport, GM storage, metadata banner and build

2026-10-15 01:38:20 +02:00

hosting.test.ts

feat(core): image hosts (server, litterbox, catbox, direct) and per-image rehosting

2026-10-14 23:38:22 +02:00

html.test.ts

fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host

2026-10-15 01:49:52 +02:00

images.test.ts

feat(core): inspect images (size from headers, sha256, shape incl. landing-page art)

2026-10-14 23:37:41 +02:00

links.test.ts

feat(core): parse MangaBaka and Webtoons links; normalise Webtoons image URLs

2026-10-14 23:36:52 +02:00

mangabaka-client.test.ts

feat(core): MangaBaka client (paginated public reads; snapshot, preview, save for review)

2026-10-14 23:38:08 +02:00

pipeline.test.ts

feat(core): compose the pipeline (links → series → current + history → inspect → compare)

2026-10-14 23:38:48 +02:00

seed.test.ts

feat(core): build the cover seed (whole set, one default) and manual-entry text

2026-10-14 23:38:15 +02:00

server-app.test.ts

fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host

2026-10-15 01:49:52 +02:00

server-config.test.ts

fix(server): keep connections open 240 s; Bun's 10 s default cut slow Wayback lookups off

2026-10-15 00:43:47 +02:00

session.test.ts

feat(core): shared review session (cards, main cover, rehost, manual text, token flow)

2026-10-14 23:38:54 +02:00

storage.test.ts

feat(server): size-capped covers folder with a 30-day sweep; in-memory storage for tests

2026-10-14 23:39:06 +02:00

template.test.ts

feat(web): working page (two links → review cards → rehost → copy or preview/confirm)

2026-10-14 23:44:58 +02:00

transport.test.ts

feat(core): model types and transport policy (pacing, retries, timeouts, token scope)

2026-10-14 23:36:34 +02:00

version.test.ts

chore: scaffold Bun + TypeScript with core boundary test; record verified commands

2026-10-14 23:34:18 +02:00

view-model.test.ts

feat(web): Obi Shelf design in a console layout, with a timeline view; record DESIGN.md

2026-10-15 01:38:00 +02:00

wayback.test.ts

fix(server): inert proxy responses, API-call header, image-only uploads; origin check by host

2026-10-15 01:49:52 +02:00

web-transport.test.ts

feat(web): working page (two links → review cards → rehost → copy or preview/confirm)

2026-10-14 23:44:58 +02:00

webtoons-parse.test.ts

feat(core): parse Webtoons series pages (current and archived) into cover candidates

2026-10-14 23:37:03 +02:00

webtoons-source.test.ts

feat(core): Source interface, registry and the Webtoons source

2026-10-14 23:37:30 +02:00

webtoons-urls.test.ts

feat(core): parse MangaBaka and Webtoons links; normalise Webtoons image URLs

2026-10-14 23:36:52 +02:00