11 Commits

Author SHA1 Message Date
fdc66efe1b fix: disable auto-redirects and validate URLs to prevent SSRF (#3)
- Add _is_safe_url() checking for private/loopback/link-local/reserved IPs
- Block internal hostnames (.local, .internal, localhost, metadata.google.internal)
- Disable allow_redirects in requests.get()
- Validate redirect target before following single hop
- Raise RuntimeError on unsafe URL or redirect
2026-07-05 07:44:27 +00:00
8e7f5bc920 Merge pull request 'CI: remove --no-cache for docker layer caching' (#12) from ci-fix-nocache into main
Reviewed-on: https://git.example.com/jarianc/NASAImageDownloader/pulls/12
2026-07-04 22:23:17 -05:00
a54d57a7c7 CI: remove --no-cache for docker layer caching 2026-07-05 03:13:09 +00:00
5acbf697fa CI: add generalized workflow 2026-07-05 02:46:34 +00:00
3b0fea6379 4 hours instead of 2. Will expose a cli param for Max Run time later 2025-10-19 21:23:36 -05:00
65623e486f added requirements.txt 2025-09-11 21:03:24 -05:00
b0e5bd273c Getting rid of last_run.txt from the repo (untracking) 2025-09-11 20:54:06 -05:00
2e0bcb845c Readme fix 2025-09-11 00:09:19 -05:00
556006d8c6 Added a Readme and License file 2025-09-11 00:08:11 -05:00
687513725c Adding output dir as script input 2025-09-10 23:39:31 -05:00
41d7a6848e Downloader up and working 2025-09-10 23:27:33 -05:00