jxxghp
|
4955b7b9ea
|
fix: harden backend isolation and execution safety
|
2026-10-16 09:11:28 +08:00 |
|
jxxghp
|
bbaec9d6b3
|
fix: preserve v3 architecture complexity budget
|
2026-09-23 18:49:00 +08:00 |
|
LS
|
c68288e897
|
feat(security): 图片代理自动信任已启用的媒体服务器主机 (#6769)
在局域网部署 Emby/Jellyfin/Plex 的用户，此前需要手动维护
SECURITY_IMAGE_DOMAINS（整表覆盖，会随版本默认值漂移）和
IMAGE_PROXY_ALLOWED_PRIVATE_RANGES，未签名的媒体服务器图片 URL
才能通过图片代理。
- is_safe_image_url_async 新增可选参数 trusted_hosts：URL 的 netloc
（含端口）或 hostname 精确命中时直接放行，不受私网拦截限制；
默认 None，现有调用方行为不变。
- fetch_image（覆盖 /img 与 /cache/image）从已启用媒体服务器的
host / play_host 计算受信主机；读取配置失败时返回空集合，不影响代理。
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
|
2026-09-23 16:34:25 +08:00 |
|
jxxghp
|
5202c04dee
|
refactor(application): unify sync async decisions
|
2026-08-29 19:54:08 +08:00 |
|
jxxghp
|
9bff18739d
|
refactor(runtime): own lifecycle and adapter boundaries
|
2026-08-28 18:18:07 +08:00 |
|
jxxghp
|
e768eb46fe
|
refactor: own coalescer flush lifecycle
|
2026-08-24 03:11:49 +08:00 |
|
jxxghp
|
7846b24f6c
|
refactor: inject URL signing runtime configuration
|
2026-08-23 01:26:09 +08:00 |
|
jxxghp
|
369d7d6448
|
refactor: reorganize backend module boundaries
|
2026-08-14 19:53:33 +08:00 |
|