3 Commits

Include renames

Author	SHA1	Message	Date
janniclas.loosenandClaude Opus 5.5	7f361304ae	fix(security): URL import with own range check and a generic error (audit M3, cheap part) ... PublicAddress blocks every private/reserved IPv4 and IPv6 range (169.254/16, 100.64/10, fc00::/7, fe80::/10, IPv4-mapped/NAT64/6to4 by their embedded address, ...) independent of the core version; checked before the request and on every redirect (Requests before_redirect). Network failures return only "Die Datei konnte nicht geladen werden."; the detail goes to the error log. DNS-rebinding pinning stays deferred. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 19:27:11 +02:00
janniclas.loosen	28bb033a8b	fix: cap Base64 media transfers at 10 MB, upload limit at most 32 MB	2026-09-26 05:04:38 +02:00
janniclas.loosenandClaude Opus 5.5	7f58301a71	docs: readme with site-wide effects, media guide; test: media/admin end-to-end; version 0.2.0 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7	2026-09-26 04:51:11 +02:00