Blake Stoddard

Prevent pixel flood attacks

4

Presenting large images to ImageProxy that need transformations will cause ImageProxy to crash in some environments, resulting in a DoS attack -- https://gist.github.com/blakestoddard/a2cb5b98eaf335f0f474fcd09c1a751b using https://a.uguu.se/cGlgezGk.jpg (temp link that will expire,...

Delegate Content-Type verification solely to contentTypeMatches()

2

Image content returned from the initial request will have its `Content-Type` verified at https://github.com/willnorris/imageproxy/blob/main/imageproxy.go#L243. Prefilling the `Accept` header with the list of accepted `Content-Type`'s has proven troublesome for some of...

First pass at adding JSON log output support + traceable transaction IDs (in the form of a UUID-based `X-Request-ID`) that allows you to tie _most_ log lines to a given...

Increased ARN checking for check_ignore_list?

6

Hi! Is there a particular reason that ARNs are ran through `check_ignore_list` on very limited basis when the watchers run? It seems like the ARN checks are limited to very...

Argo Rollouts UI integration for promotions where rollouts are used

4

# Proposed Feature Using Kargo with Argo/Rollouts requires looking in two different places for info -- Kargo for starting a promotion (and info on the deployment status), and Argo for...