Jarian Cottingham
d37e14a2d9
- Validate paste IDs against ^[a-f0-9]{16}$ before filesystem access
(blocks read/delete traversal via crafted URLs)
- Remove duplicate ALLOWED_IMAGE_EXTENSIONS that re-allowed SVG
(XSS via stored SVG); keep magic-byte validation
- Remove duplicate cleanup thread (two background loops were started)
- Unknown expiry keys now default to 1 day instead of never
- request.secure -> request.is_secure (werkzeug 3.x)
- Add gunicorn to requirements (Dockerfile CMD referenced it)
- 11 unit tests, ruff clean, MIT LICENSE, full README (was empty)
15 lines
147 B
Plaintext
15 lines
147 B
Plaintext
venv/
|
|
__pycache__/
|
|
*.pyc
|
|
.git/
|
|
.gitignore
|
|
*.md
|
|
Dockerfile
|
|
docker-compose.yml
|
|
docker-compose.override.yml
|
|
.env
|
|
.dockerignore
|
|
store/
|
|
uploads/
|
|
tests/
|