thumbor / thumbor / 26697319307

89%

push

github

fix(http_loader): harden ALLOWED_SOURCES pattern handling

Treat plain string ALLOWED_SOURCES entries as literal hostnames by escaping
them before matching, so dots do not behave as regex wildcards.

Keep backward compatibility for legacy regex-like strings by detecting regex
markers, warning once, and matching them as before. Compiled re.Pattern
entries continue to match the normalized full URL.

Update docs/config text and tests for literal strings, legacy regex strings,
compiled regexes, and startup warnings.

23 of 25 new or added lines in 3 files covered. (92.0%)

3933 of 4424 relevant lines covered (88.9%)

4.45 hits per line