secubox-deb/packages/secubox-metablogizer/api
CyberMind-FR 8396f76123 fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract
Live gk2 findings: haproxyctl vhost-add is blocked by its drift-guard and is
redundant with default_backend mitmproxy_inspector, so route_ok now reflects the
WAF route (the operative mechanism), vhost stays advisory. And the board runs
Python 3.11.2 (no tarfile filter= kwarg) — replaced filter=data with a portable
manual member check (rejects traversal/absolute/links).

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-11 13:49:38 +02:00
..
publish fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract 2026-07-11 13:49:38 +02:00
routers fix(publish): delegate vhost/WAF/cert to metablogizer /publish/route; drop illegal root-config writes 2026-07-11 13:28:32 +02:00
tests fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract 2026-07-11 13:49:38 +02:00
__init__.py
main.py feat(metablogizer): publisher wizard endpoints (wizard/export/import) 2026-07-11 13:14:40 +02:00
rmtree.py
site_schema.py
webhook.py feat(metablogizer): version uploads into their Gitea repo (auto commit+push per upload) 2026-07-10 08:22:22 +02:00