Roland 00d7816cfd repos: pin the repo's host once, and only exempt its own host and port ... A submodule on the repo's host was allowed unpinned, on any port. The owner of the repo's domain could serve the clone from a public address, then answer the submodule's lookup with an internal address (DNS rebinding), or point it at another port on that name. The repo's host is now resolved once per download, and every fetch (ls-remote, clone, fetch, submodule update) is pinned to that answer. A submodule on the repo's host *and port* is fetched from those same addresses, still allowing a LAN forge the user chose; another port on that name is checked like any other host. Tests no longer use real DNS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-06 17:38:45 -06:00
..
archive	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
docs	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
flasher	db: request-path library functions use the request's connection (#774)	2026-10-04 11:05:20 -06:00
inventory	Strip whitespace from inventory item string values on save	2026-07-30 17:34:46 -06:00
map	Map previews that never drew, and a Docker map with no world under it (#658)	2026-08-11 20:37:23 -06:00
repos	repos: pin the repo's host once, and only exempt its own host and port	2026-10-06 17:38:45 -06:00
videos	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
zim	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
__init__.py	Add a Repos module that mirrors git repositories (backend)	2026-10-06 16:56:09 -06:00