kami a7fce17d5b fix ssrf guard in image proxy (#111) ...

- add domain allowlist for known image hosts (coverartarchive.org,
  lastfm.freetls.fastly.net, i.scdn.co, images.genius.com, etc.)
- validate redirect targets against allowlist before following
- parse URL properly instead of prefix check (prevents file:// bypass)
- log blocked requests for visibility

2026-07-15 11:24:17 +04:00

..

scripts

initial state: muzick music player + recommendation engine

2026-07-14 01:35:52 +04:00

src

fix ssrf guard in image proxy (#111)

2026-07-15 11:24:17 +04:00

.dockerignore

initial state: muzick music player + recommendation engine

2026-07-14 01:35:52 +04:00

Dockerfile

initial state: muzick music player + recommendation engine

2026-07-14 01:35:52 +04:00

package-lock.json

fix AGENTS.md stack ref, add CORS plugin, add .env.example, remove dead index.ts

2026-07-14 01:36:25 +04:00

package.json

fix muzick backend: pin @fastify/cors@^9.0.1, fix redis hostname, rebuild stale image

2026-07-14 15:31:44 +04:00

tsconfig.json

initial state: muzick music player + recommendation engine

2026-07-14 01:35:52 +04:00

vitest.config.ts

initial state: muzick music player + recommendation engine

2026-07-14 01:35:52 +04:00