Roland 4810b8bc50 repos: close the remaining submodule SSRF gaps ... * .gitmodules is read NUL-delimited, and an unreadable record refuses the submodules. A submodule name with a space (`[submodule "a b"]`) made `--get-regexp`'s "key value" output misfile its URL as a path, so the URL was never checked. * Submodule URLs must have a strict shape every parser reads the same way (no userinfo, backslash, query, fragment, or whitespace), so a URL cannot be checked as one host and fetched from another. * Each checked host is pinned (http.curloptResolve) to the addresses that were checked, so DNS cannot change between the check and git's fetch. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-06 16:56:10 -06:00
..
archive	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
docs	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
flasher	db: request-path library functions use the request's connection (#774)	2026-10-04 11:05:20 -06:00
inventory	Strip whitespace from inventory item string values on save	2026-07-30 17:34:46 -06:00
map	Map previews that never drew, and a Docker map with no world under it (#658)	2026-08-11 20:37:23 -06:00
repos	repos: close the remaining submodule SSRF gaps	2026-10-06 16:56:10 -06:00
videos	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
zim	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
__init__.py	Add a Repos module that mirrors git repositories (backend)	2026-10-06 16:56:09 -06:00