MechaCat02 e960aae163 fix: enable browser SSRF interception by default (H1) ...

Off-by-default left headless-browser page JS/subresources/redirects able to reach
internal IPs (Chromium bypasses the reqwest SafeResolver). The crawler runs in the
backend container so it can't be network-isolated without breaking Postgres — the
CDP Fetch interceptor is the control. Flip CRAWLER_SSRF_INTERCEPT default to true
(config + .env.example + compose); off-path unchanged as break-glass. The
#[ignore]'d smoke test validates against real Chromium (command documented).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 21:51:05 +02:00

..

e2e

fix: add CSP and defense-in-depth security response headers

2026-07-13 19:27:27 +02:00

src

fix: guard AddToCollectionModal against out-of-order load results

2026-07-13 21:31:26 +02:00

static

feat(frontend): use the Mangalord monogram as the browser tab icon

2026-07-04 19:34:45 +02:00

.dockerignore

bugfix: third-pass audit follow-ups (F1-F4 + dockerignore)

2026-05-17 00:13:14 +02:00

.gitignore

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

audit.mjs

fix(frontend): mobile layout polish + overflow handling (0.60.1)

2026-06-08 20:58:21 +02:00

csp-config.js

fix: add CSP and defense-in-depth security response headers

2026-07-13 19:27:27 +02:00

Dockerfile

fix(docker): unblock image builds on this host

2026-05-31 17:26:58 +02:00

package-lock.json

fix(detail): resync reaction toggle across manga navigation

2026-07-05 18:17:18 +02:00

package.json

fix: enable browser SSRF interception by default (H1)

2026-07-13 21:51:05 +02:00

playwright.config.ts

test(e2e): kill cold-start flakiness with an /api/v1 fallback + one retry

2026-07-02 20:06:20 +02:00

svelte.config.js

fix: add CSP and defense-in-depth security response headers

2026-07-13 19:27:27 +02:00

tsconfig.json

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

vite.config.ts

feat: paginate list views, fix stale page titles, tidy admin filter bar

2026-06-01 21:18:53 +02:00