sower

mirror of https://github.com/wweir/sower.git synced 2026-10-19 08:13:34 +00:00

Files

T

History

wweir dab041b9f6 docs(sowerd): keep the site-route authority rule in one place

Second half of the review: the rationale for `authority` had been written into
every comment that touched it, which is three copies to keep in sync. Keep the
argument in docs/security.md and leave the config example, the struct comment
and the constants stating only what the value does.

- docs/security.md: record "an upstream trusting X-Forwarded-Host" under
  Rejected Directions, where the document already collects declined designs,
  instead of inside the new rule section; merge the per-route bullet into the
  client-controlled one they overlapped with.
- ARCHITECTURE.md: the sentence added last commit left the fake-site rationale
  dangling after the site-route clause; split it back into one claim per
  sentence.
- docs/plans/site-routing.md: the plan states the unconditional Host rewrite as
  a decision of its time, so it gets a forward note to the authoritative
  document rather than a rewrite of the record.
- config/sowerd.go: clearer validation error ("unknown value", naming both
  accepted values) and a tighter comment; no behavior change beyond the
  message.

2026-10-12 16:09:19 +08:00

example_load_test.go

fix(config): keep the checked-in sowerd example in sync with the embedded one

2026-10-10 14:56:49 +08:00

sower_test.go

fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6

2026-08-12 17:23:14 +08:00

sower.go

fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6

2026-08-12 17:23:14 +08:00

sower.toml

fix(sower): keep the soft heap limit above the live rule heap