ukeeper / ukeeper-readability / 28759998790

Builds Branch Commit Type Ran Committer Via Coverage
28759998790 master Cache Docker build layers with type=gha The docker.yml build had no build cache, so every run rebuilt the image from scratch. Add buildx type=gha cache scoped per platform so layers are reused across runs. push paskal github
78.26
28759959610 fix/docker-gha-cache Cache Docker build layers with type=gha The docker.yml build had no build cache, so every run rebuilt the image from scratch. Add buildx type=gha cache scoped per platform so layers are reused across runs. Pull #86 paskal github
78.26
28722551124 master Stream image sizing, share client, honor context, cap concurrency getImageSize buffered every image fully into memory via io.ReadAll, built a fresh http.Client per image, ignored the request context, and spawned one unbounded goroutine per <img> ... push paskal github
78.26
28722516503 master Trim and drop empty lines when saving multi-line rule fields saveRule split match_url, excludes and test_urls on "\n" only, so browser-submitted \r\n left a trailing \r on every entry and blank lines became empty-string entries, and this junk acc... push paskal github
78.3
28722490970 master Bump actions/checkout from 6 to 7 in the github-actions-updates group Bumps the github-actions-updates group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https:... push paskal github
77.95
28705618345 fix/image-fetch-streaming Stream image sizing, share client, honor context, cap concurrency getImageSize buffered every image fully into memory via io.ReadAll, built a fresh http.Client per image, ignored the request context, and spawned one unbounded goroutine per <img> ... Pull #85 paskal github
77.91
28705617872 fix/ssrf-ip-guard Block SSRF to non-public addresses via connect-time IP guard POST /api/extract is unauthenticated and the extractor fetched any URL it was given with no host validation, so a caller could reach http://169.254.169.254/... (cloud metadata), localho... Pull #83 paskal github
77.85
28681456843 fix/image-fetch-streaming Stream image sizing, share client, honor context, cap concurrency getImageSize buffered every image fully into memory via io.ReadAll, built a fresh http.Client per image, ignored the request context, and spawned one unbounded goroutine per <img> ... Pull #85 paskal github
77.93
28681458444 fix/image-fetch-streaming Stream image sizing, share client, honor context, cap concurrency getImageSize buffered every image fully into memory via io.ReadAll, built a fresh http.Client per image, ignored the request context, and spawned one unbounded goroutine per <img> ... Pull #85 paskal github
77.93
28681422902 fix/ssrf-ip-guard Block SSRF to non-public addresses via connect-time IP guard POST /api/extract is unauthenticated and the extractor fetched any URL it was given with no host validation, so a caller could reach http://169.254.169.254/... (cloud metadata), localho... Pull #83 paskal github
77.83
28681291847 fix/textarea-crlf Trim and drop empty lines when saving multi-line rule fields saveRule split match_url, excludes and test_urls on "\n" only, so browser-submitted \r\n left a trailing \r on every entry and blank lines became empty-string entries, and this junk acc... Pull #84 paskal github
78.3
28681138369 fix/textarea-crlf Trim and drop empty lines when saving multi-line rule fields saveRule split match_url, excludes and test_urls on "\n" only, so browser-submitted \r\n left a trailing \r on every entry and blank lines became empty-string entries, and this junk acc... Pull #84 paskal github
78.3
28681140645 fix/image-fetch-streaming Stream image sizing, share client, honor context, cap concurrency getImageSize buffered every image fully into memory via io.ReadAll, built a fresh http.Client per image, ignored the request context, and spawned one unbounded goroutine per <img> ... Pull #85 paskal github
77.84
28681139181 fix/ssrf-ip-guard Block SSRF to non-public addresses via connect-time IP guard POST /api/extract is unauthenticated and the extractor fetched any URL it was given with no host validation, so a caller could reach http://169.254.169.254/... (cloud metadata), localho... Pull #83 paskal github
77.77
28679477920 fix-top3-review Fix top-3 review findings: SSRF, textarea CRLF corruption, image fetch Block SSRF via user-supplied URLs. Extraction and image fetches now reject targets resolving to loopback, private, link-local or other non-public addresses via a net.Dialer Co... Pull #82 paskal github
77.97