ayrisdev/animexe
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
35 Commits 1 Branch 0 Tags
main
Commit Graph
6 Commits
Author SHA1 Message Date
Mustafa Yildiz ee0fdd587c fix(player,vtt): fix CORS proxy bypass on third-party streams and improve vtt-proxy resilience 2026-08-21 14:32:13 +03:00
Mustafa Yildiz c68c5a4c65 fix(seo,performance): disallow bot media streaming, disable fastcgi buffering, and resolve real cloudflare client IPs 2026-08-21 14:02:31 +03:00
Mustafa Yildiz 19c8d496c7 fix(stream,bot-detector): prevent false-positive 403 bans and memory exhaustion on direct video streams 2026-08-21 13:55:19 +03:00
ayrisdevandClaude Opus 4.8 87e0d7dcf5 Perf: drop session/bot middleware from /media so Cloudflare can cache images 
Media responses carried Laravel session cookies (Set-Cookie), which made
Cloudflare BYPASS the cache for every cover/avatar/banner. These are public
files with no user context, so the session/cookie/CSRF chain is unnecessary.
Also skips BotDetector (one analytics_bot_logs INSERT per image) and the SEO
redirect lookup.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-15 13:28:18 +03:00
ayrisdevandClaude Opus 4.8 782226674a Security: harden SSRF guard on stream proxies, fix vtt-proxy allowlist 
Resolve hosts to IPs and reject private/reserved/link-local ranges (incl.
169.254 cloud metadata) instead of matching hostname text, and re-validate
every redirect hop by following them manually. Restrict curl to http(s).
vtt-proxy allowlist now requires an exact host or a real subdomain.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-15 13:12:44 +03:00
ayrisdevandClaude Opus 4.8 a63515cfc6 Initial commit: Animexe Laravel platform 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-14 00:01:48 +03:00