webmentions-ssg - A web service that implements webmentions receiver/sender for static site generators.

	Commit message (Collapse)	Author	Age
*	test(core): align tests with module ownership	Dennis Fink	2026-08-21
\| \| \| \| \| \| \| \| \|	Move direct validator, model, and Huey extension coverage into dedicated test modules and mock dependencies where behavior belongs to another module. Expand Huey extension typing and coverage while removing duplicate assertions from scanner, sender, form, and view tests.
*	chore(core): standardize SPDX copyright headers	Dennis Fink	2026-08-20
\| \| \| \| \| \| \| \|	Add SPDX copyright and license headers to source, test, migration, template, and static files throughout the project. Include the maintainer email in copyright notices and fill in the BSD license copyright holder.
*	refactor(core): improve typing and test coverage	Dennis Fink	2026-08-19
\| \| \| \| \| \| \| \| \|	Restructure database and user CLI commands, make passwords write-only model properties, and use the UTC datetime constant throughout the application. Add PEP 287-style documentation and expand receiver, scanner, sender, and URL security tests to cover error paths and edge cases.
*	feat(sender): add manual source rescan action	Dennis Fink	2026-08-17
\| \| \| \| \| \| \| \|	Add an authenticated action to queue a source rescan from the sent Webmentions overview. Extract the reusable confirmation modal and its JavaScript so received and sent admin actions share the same implementation.
*	feat(sender): add outgoing Webmention pipeline	Dennis Fink	2026-08-15
\| \| \| \| \| \| \| \| \| \| \|	Scan generated h-entry documents for Webmention targets and track source revisions and delivery state in the database. Discover target endpoints, send Webmentions asynchronously, and reconcile updated, removed, restored, and deleted sources across scans. Add authenticated views for inspecting sent Webmentions and make the scanner schedule configurable.
*	fix(receiver): prevent requests to non-public addresses	Dennis Fink	2026-08-10
\| \| \| \| \| \| \| \| \|	Resolve source hostnames before fetching and reject addresses that are not globally routable to prevent SSRF against local or private services. Repeat the check for every HTTP request so redirects cannot bypass the initial source validation. Treat DNS resolution failures during verification as temporary fetch errors.
*	Implement received Webmention handling	Dennis Fink	2026-08-09
	Add the Flask application setup, database models and migrations, authentication, and configuration for development and testing. Implement asynchronous Webmention verification with Huey, including HTML and plain-text source validation, retries, status tracking, and size limits. Add status, login, and paginated received-Webmention views together with comprehensive tests for forms, views, and receiver tasks.