ginxsom

Files

T

History

Laan Tungir 694219d003 Phase 1: server-side metadata detect-and-reject backstop

Add metadata_scan.c/.h: pure-C, dependency-free byte scanners for JPEG
(APP1 Exif/XMP, APP13 IPTC), PNG (eXIf, denylisted tEXt/iTXt/zTXt keys),
WebP (EXIF/XMP chunks), GIF (comment/XMP extensions), PDF (/Author,
/Producer, /CreationDate, etc.), TIFF (ExifIFD/GPS IFD pointers), HEIC
(Exif item payload). Conservative — when in doubt, flags.

Wire into handle_upload_request_with_validation() after SHA-256 compute,
before fopen: rejects with 415 + X-Reason: exif_detected, preserving
BUD-01 content addressing (server never rewrites). Add metadata_scan_enabled
config toggle (default true). Add to Makefile + Dockerfile.alpine-musl.

Tests: metadata_scan_test.c unit test (20 cases) + metadata_scan_test.sh
integration test (7 cases, run against live server).

See ~/lt/metadata_stripping/plans/blob-metadata-stripping.md (Part 2).

2026-07-31 07:26:07 -04:00

auth_test_tmp

v0.1.9 - program generates it's own private keys.

2025-11-20 07:53:58 -04:00

local_webtype_test

v0.1.32 - Migrate to nostr_core_lib v0.4.13 and unify app/nostr logging via callback API

2026-03-15 08:37:03 -04:00

23458_test.sh

v0.1.13 - Fix Kind 23458 test script: use websocat for bidirectional relay communication and correct nak decrypt flag (-p instead of --recipient-pubkey). Admin command system now fully functional end-to-end with NIP-44 encryption.

2025-12-11 14:28:33 -04:00

admin_event_test.sh

v0.1.15 - Fix config page display and rebrand admin UI from relay to Blossom terminology