Frédéric Guillot
cb695e653a
fix(security): use a more restrictive CSP for untrusted content
2025-03-29 19:49:41 -07:00
Frédéric Guillot
c531be8780
fix: update Content-Security-Policy to use 'sandbox' directive
2025-03-28 13:06:59 -07:00
Frédéric Guillot
7c5d6cf35f
feat(mediaproxy): pass original filename in Content-Disposition header
...
When you download/save proxified media, the original filename is lost. That
information could be retained by passing a header `Content-Disposition: inline;
filename="ORIGNAL_FILENAME.EXT"` when serving the media file. The requested URL
would still be obfuscated, but if the client downloads the file it'll use that
original filename.
2024-10-30 20:44:19 -07:00
AiraNadih
469f23968e
feat(mediaProxy): implement referer spoofing for restricted media resources
2024-10-30 19:50:12 -07:00
Frédéric Guillot
7d21298fab
fix(mediaproxy): forward client user-agent to origin to bypass bot protection
2024-09-11 21:01:56 -07:00
Frédéric Guillot
c2311e316c
Rename PROXY_* options to MEDIA_PROXY_*
2024-03-20 21:28:28 -07:00
Frédéric Guillot
97feec8ebf
Add more URL validation in media proxy
2024-02-26 20:29:40 -08:00
Frédéric Guillot
c0e954f19d
Implement structured logging using log/slog package
2023-09-24 22:37:33 -07:00
Frédéric Guillot
168a870c02
Move internal packages to an internal folder
...
For reference: https://go.dev/doc/go1.4#internalpackages
2023-08-10 20:29:34 -07:00
