5 Commits

Include renames

Author	SHA1	Message	Date
ik	4974f362ac	A03: Validate scheme/host/port before every network I/O ... - _validate_url_before_io: check scheme (HTTPS only), port (80/443), host - fetch_html: recursive redirect validation with hop limit (MAX_REDIRECT_HOPS=5) - Reject non-HTTPS redirects and non-standard ports - All validation happens BEFORE urlopen() call - Updated tests for new validation messages - 109 Python tests pass	2026-09-10 06:11:17 +07:00
ik	79245965ec	A02: Atomic cooldown state with exclusive lock and flush ... - _write_state: write to temp file, fsync, rename atomically - Acquire exclusive lock before any file operations - Flush and fsync before unlock to prevent data loss - Remove stale .tmp file after successful write - Add test for atomic write behavior - 109 Python tests pass	2026-09-10 06:10:35 +07:00
ik	39f66481be	R11: Validate URL host before network I/O — prevent SSRF ... - Add _validate_url_host() to check allowlist before urlopen() - Validate both original URL and redirect target - Reject localhost, internal IPs, and non-allowlisted hosts - Add 2 unit tests for disallowed host rejection - Prevents SSRF attacks via malicious source URLs	2026-09-10 05:45:57 +07:00
ik	486b4e9645	fix: enforce community cooldown per site	2026-09-08 16:32:42 +07:00
ik	3f468799bd	feat: enforce community source cooldown	2026-09-05 07:52:37 +07:00