wenking
|
38d7ca3f45
|
fix(image): 图片跳转校验沿用已配置的非公网放行网段 (#7110)
|
2026-10-20 20:13:12 +08:00 |
|
DDSRem
|
2de976f6b3
|
Merge pull request #7050 from DDSRem-Dev/codex-comment-migration
docs: 统一全项目中文注释和结构化契约说明
|
2026-10-17 19:26:29 +08:00 |
|
jxxghp
|
4955b7b9ea
|
fix: harden backend isolation and execution safety
|
2026-10-16 09:11:28 +08:00 |
|
jxxghp
|
f4b1e7e186
|
fix(image): retry transient cover fetch failures
|
2026-10-04 14:52:04 +08:00 |
|
freeman
|
323c457bf9
|
fix(image): key cached images by complete URL (#6840)
|
2026-09-30 20:41:42 +08:00 |
|
jxxghp
|
b4175a4f88
|
fix(image): cache site allowlist and include custom image hosts
|
2026-09-30 01:09:32 +08:00 |
|
jxxghp
|
8c46c9bee8
|
fix(image): allow configured site domains in image proxy
|
2026-09-30 00:53:37 +08:00 |
|
LS
|
c68288e897
|
feat(security): 图片代理自动信任已启用的媒体服务器主机 (#6769)
在局域网部署 Emby/Jellyfin/Plex 的用户，此前需要手动维护
SECURITY_IMAGE_DOMAINS（整表覆盖，会随版本默认值漂移）和
IMAGE_PROXY_ALLOWED_PRIVATE_RANGES，未签名的媒体服务器图片 URL
才能通过图片代理。
- is_safe_image_url_async 新增可选参数 trusted_hosts：URL 的 netloc
（含端口）或 hostname 精确命中时直接放行，不受私网拦截限制；
默认 None，现有调用方行为不变。
- fetch_image（覆盖 /img 与 /cache/image）从已启用媒体服务器的
host / play_host 计算受信主机；读取配置失败时返回空集合，不影响代理。
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
|
2026-09-23 16:34:25 +08:00 |
|
jxxghp
|
abe445b39b
|
fix(image): handle root URL cache paths
|
2026-09-17 11:26:45 +08:00 |
|
jxxghp
|
ee6393974a
|
feat: 内置 Bangumi 数据与图片代理
|
2026-09-15 07:42:18 +08:00 |
|
jxxghp
|
2fe39d856c
|
refactor(architecture): invert application adapter boundaries
|
2026-08-28 18:45:47 +08:00 |
|
jxxghp
|
369d7d6448
|
refactor: reorganize backend module boundaries
|
2026-08-14 19:53:33 +08:00 |
|
jxxghp
|
7b3444c366
|
refactor backend module architecture
|
2026-08-14 15:45:38 +08:00 |
|
InfinityPacer
|
1a3c1b8b39
|
fix(system): derive image proxy MIME from content (#6202)
|
2026-07-27 14:56:46 +08:00 |
|