8 Commits

Author	SHA1	Message	Date
Jarian Cottingham	f843270aab	Merge pull request 'fix: disable auto-redirects to prevent SSRF (#3)' (#15) from fix/issue-3 into main ... Reviewed-on: https://git.example.com/jarianc/NASAImageDownloader/pulls/15	2026-07-05 02:50:51 -05:00
Jarian Cottingham	5c23a347ad	Merge pull request 'fix: validate --output path to prevent arbitrary file write (#2)' (#14) from fix/issue-2 into main ... Reviewed-on: https://git.example.com/jarianc/NASAImageDownloader/pulls/14	2026-07-05 02:50:29 -05:00
Jarian Cottingham	fdc66efe1b	fix: disable auto-redirects and validate URLs to prevent SSRF (#3) ... - Add _is_safe_url() checking for private/loopback/link-local/reserved IPs - Block internal hostnames (.local, .internal, localhost, metadata.google.internal) - Disable allow_redirects in requests.get() - Validate redirect target before following single hop - Raise RuntimeError on unsafe URL or redirect	2026-07-05 07:44:27 +00:00
Jarian Cottingham	69dfdce4f5	fix: validate --output path to prevent arbitrary file write (#2) ... - Block system-critical paths (/etc, /usr, /bin, /sbin, /boot, /dev, /proc, /sys, /) - Resolve path before validation to defeat symlink tricks - Exit with error message if blocked path detected	2026-07-05 07:43:52 +00:00
Jarian Cottingham	668f48897f	fix: sanitize nasa_id and filenames to prevent path traversal (#1) ... - Add sanitize_filename() to strip path separators and parent refs - Apply sanitization to nasa_id used in metadata filenames - Apply sanitization to image filenames derived from asset_href - Preserve raw nasa_id for API calls to avoid breaking asset lookup	2026-07-05 07:43:07 +00:00
Jarian Cottingham	3b0fea6379	4 hours instead of 2. Will expose a cli param for Max Run time later	2025-10-19 21:23:36 -05:00
Jarian Cottingham	687513725c	Adding output dir as script input	2025-09-10 23:39:31 -05:00
Jarian Cottingham	41d7a6848e	Downloader up and working	2025-09-10 23:27:33 -05:00