kami
|
a7fce17d5b
|
fix ssrf guard in image proxy (#111)
- add domain allowlist for known image hosts (coverartarchive.org,
lastfm.freetls.fastly.net, i.scdn.co, images.genius.com, etc.)
- validate redirect targets against allowlist before following
- parse URL properly instead of prefix check (prevents file:// bypass)
- log blocked requests for visibility
|
2026-07-15 11:24:17 +04:00 |
|