| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
|
| |
Add SPDX copyright and license headers to source, test, migration,
template, and static files throughout the project.
Include the maintainer email in copyright notices and fill in the BSD
license copyright holder.
|
| |
|
|
|
|
|
|
|
| |
Restructure database and user CLI commands, make passwords write-only
model properties, and use the UTC datetime constant throughout the
application.
Add PEP 287-style documentation and expand receiver, scanner, sender,
and URL security tests to cover error paths and edge cases.
|
| |
|
|
|
|
|
|
|
|
|
| |
Scan generated h-entry documents for Webmention targets and track source
revisions and delivery state in the database.
Discover target endpoints, send Webmentions asynchronously, and reconcile
updated, removed, restored, and deleted sources across scans.
Add authenticated views for inspecting sent Webmentions and make the scanner
schedule configurable.
|
|
|
Resolve source hostnames before fetching and reject addresses that are
not globally routable to prevent SSRF against local or private services.
Repeat the check for every HTTP request so redirects cannot bypass the
initial source validation. Treat DNS resolution failures during
verification as temporary fetch errors.
|
