Fixes a handful of low/medium security issues - #443

Open

mikedamm wants to merge 13 commits into

h2non:masterfrom

mikedamm:master

Commits on Aug 22, 2025

Updates to make it build
mikedamm
committed
d4076af
Update source_fs_test.go
mikedamm
committed
03cedb2
Only set speed when the format supports it
mikedamm
committed
9821763
Upgrade versions, get tests working
mikedamm
committed
524c0c6

Commits on Aug 23, 2025

Be explicit about the size so test passes
mikedamm
committed
c84425d
Fix impossible logic in sanity check
mikedamm
committed
1eda6af
Actually enforce MaxAllowedSize to prevent unbounded reads
mikedamm
committed
2ab677f
Apply security checks to watermark image URL as well
mikedamm
committed
4766c0e
Prevent memory DoS from unbounded reads
mikedamm
committed
c4a5871
Fix panic when sending blank/short host header
mikedamm
committed
f6279d4
Prevent timing attack on API key
mikedamm
committed
06612d2
Prevent JSON injection
mikedamm
committed
289b2ff
Mitigate symlink/path traversal
mikedamm
committed
c8585c6