webmentions-ssg/webmentions_ssg/tasks/receiver.py, branch mainA web service that implements webmentions receiver/sender for static site generators.https://git.dennisfink.me/webmentions-ssg/atom/webmentions_ssg/tasks/receiver.py?h=main2026-08-20T20:22:15Zchore(core): standardize SPDX copyright headers2026-08-20T20:22:15ZDennis Fink2026-08-20T20:22:15Zurn:sha1:12b8c4b7f1d14556cc459f672b501e901da2d216
Add SPDX copyright and license headers to source, test, migration,
template, and static files throughout the project.
Include the maintainer email in copyright notices and fill in the BSD
license copyright holder.
refactor(core): improve typing and test coverage2026-08-19T17:49:55ZDennis Fink2026-08-19T17:49:55Zurn:sha1:d0e245d63e014d268310976fc45429f08d2cbbe9
Restructure database and user CLI commands, make passwords write-only
model properties, and use the UTC datetime constant throughout the
application.
Add PEP 287-style documentation and expand receiver, scanner, sender,
and URL security tests to cover error paths and edge cases.
feat(sender): add outgoing Webmention pipeline2026-08-15T18:54:53ZDennis Fink2026-08-15T18:54:53Zurn:sha1:e0f65d7ff582b32f1c7b5508bba8cda807aaae5f
Scan generated h-entry documents for Webmention targets and track source
revisions and delivery state in the database.
Discover target endpoints, send Webmentions asynchronously, and reconcile
updated, removed, restored, and deleted sources across scans.
Add authenticated views for inspecting sent Webmentions and make the scanner
schedule configurable.
fix(receiver): prevent requests to non-public addresses2026-08-10T17:36:49ZDennis Fink2026-08-10T17:36:49Zurn:sha1:8350bef3e3baea6042ed3780a054cc65707e9f8d
Resolve source hostnames before fetching and reject addresses that are
not globally routable to prevent SSRF against local or private services.
Repeat the check for every HTTP request so redirects cannot bypass the
initial source validation. Treat DNS resolution failures during
verification as temporary fetch errors.
Implement received Webmention handling2026-08-09T12:22:00ZDennis Fink2026-08-09T12:15:29Zurn:sha1:67eff0a854da010cb6ecd119d84238ec3e119272
Add the Flask application setup, database models and migrations,
authentication, and configuration for development and testing.
Implement asynchronous Webmention verification with Huey, including HTML
and plain-text source validation, retries, status tracking, and size
limits.
Add status, login, and paginated received-Webmention views together with
comprehensive tests for forms, views, and receiver tasks.