webmentions-ssg/tests/test_forms.py, branch main A web service that implements webmentions receiver/sender for static site generators. https://git.dennisfink.me/webmentions-ssg/atom/tests/test_forms.py?h=main 2026-08-21T08:37:56Z test(core): align tests with module ownership 2026-08-21T08:37:56Z Dennis Fink 2026-08-21T08:37:56Z urn:sha1:c5492398f100ccb154fa557d657bae2322f95cf7 Move direct validator, model, and Huey extension coverage into dedicated test modules and mock dependencies where behavior belongs to another module. Expand Huey extension typing and coverage while removing duplicate assertions from scanner, sender, form, and view tests. chore(core): standardize SPDX copyright headers 2026-08-20T20:22:15Z Dennis Fink 2026-08-20T20:22:15Z urn:sha1:12b8c4b7f1d14556cc459f672b501e901da2d216 Add SPDX copyright and license headers to source, test, migration, template, and static files throughout the project. Include the maintainer email in copyright notices and fill in the BSD license copyright holder. feat(sender): add outgoing Webmention pipeline 2026-08-15T18:54:53Z Dennis Fink 2026-08-15T18:54:53Z urn:sha1:e0f65d7ff582b32f1c7b5508bba8cda807aaae5f Scan generated h-entry documents for Webmention targets and track source revisions and delivery state in the database. Discover target endpoints, send Webmentions asynchronously, and reconcile updated, removed, restored, and deleted sources across scans. Add authenticated views for inspecting sent Webmentions and make the scanner schedule configurable. test: simplify mocks and localize test fixtures 2026-08-10T18:00:28Z Dennis Fink 2026-08-10T18:00:28Z urn:sha1:5b39f70aa14cac635b6084170e9d0bd3f548b911 Replace shared HTTPX and DNS fixtures with targeted unittest.mock patches close to the tests that need them. Keep conftest focused on application and client setup, while moving receiver-specific helpers into the receiver test module. fix(receiver): prevent requests to non-public addresses 2026-08-10T17:36:49Z Dennis Fink 2026-08-10T17:36:49Z urn:sha1:8350bef3e3baea6042ed3780a054cc65707e9f8d Resolve source hostnames before fetching and reject addresses that are not globally routable to prevent SSRF against local or private services. Repeat the check for every HTTP request so redirects cannot bypass the initial source validation. Treat DNS resolution failures during verification as temporary fetch errors. Implement received Webmention handling 2026-08-09T12:22:00Z Dennis Fink 2026-08-09T12:15:29Z urn:sha1:67eff0a854da010cb6ecd119d84238ec3e119272 Add the Flask application setup, database models and migrations, authentication, and configuration for development and testing. Implement asynchronous Webmention verification with Huey, including HTML and plain-text source validation, retries, status tracking, and size limits. Add status, login, and paginated received-Webmention views together with comprehensive tests for forms, views, and receiver tasks.