Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-09-14 | - fix multiple vulnerabilities in af_proxy_http | Andrew Dolgov | |
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions | |||
2019-08-15 | pluginhost: add helper methods to get private/public pluginmethod endpoint URLs | Andrew Dolgov | |
2019-08-15 | fix several leftover mentions of old (renamed) class name, duh | Andrew Dolgov | |
2019-08-15 | af_zz_imgproxy: rename to af_proxy_http, use priority hook loader | Andrew Dolgov | |