Timmy
517c8dbac3
Some checks failed
Quality gates / quality (pull_request) Failing after 2m39s
Closes the PR 63 hostile-review blockers: 1. Immutable pinned Python/Pillow runtime (TIMMY_PYTHON absolute, --verify-pin), deployment/runtime re-encode smoke gate in build_release + deploy_staging. 2. Header-only width/height/total-pixel/bomb rejection before full decode; proves 6000x6000 and 12000x12000 stay resource bounded (RSS + address-space caps). 3. Fail-fast decoder concurrency ceiling; tests count actual spawned children. 4. Rate-limiter key cardinality hard-bounded under 20k+ unexpired identities, trusted-loopback-proxy identity, no spoofable forwarded headers, fixed-window boundary burst smoothed by two-window sliding count. 5. build_release explicitly syntax/gates every new JS module + Python re-encoder + production-runtime smoke; CI runs reencode-image test and the runtime pin smoke. 6. Robust polyglot contract via canonical container parsing; rejects uppercase/mixed script, appended HTML, ZIP local/EOCD and archive tails, data after canonical JPEG/PNG/WebP end; no naive compressed-byte scans (false-positive controls pass). 7. Canonical base64 data-URL grammar with byte-exact round trip; rejects missing/excess padding, whitespace/CRLF, malformed and noncanonical encodings; exact MIME policy. 8. Missing Pillow / runtime-unavailable maps to sanitized 503 + manual fallback. 9. Inbound body-read timeout and stop-on-oversize; preserves sanitized 413, base path, provider suppression, and temp cleanup; socket torn down on rejection. Audited prior partial edits: reused the sound source modules, re-wired new tests into the unit/syntax gates, fixed a non-canonical readJson that destroyed the socket before delivering 413/408, and hardened test flakiness (port reuse, EPIPE, startup races). |
||
|---|---|---|
| .. | ||
| fake-hermes.mjs | ||
| ingress-bomb.png | ||
| ingress-buried-signatures.jpg | ||
| ingress-clean.jpg | ||
| ingress-empty.jpg | ||
| ingress-entropy-control.jpg | ||
| ingress-exif.jpg | ||
| ingress-garbage.jpg | ||
| ingress-metadata.png | ||
| ingress-oversized.jpg | ||
| ingress-polyglot.gif | ||
| ingress-script.svg | ||
| ingress-spoofed.html | ||
| ingress-tail-7z.jpg | ||
| ingress-tail-after-iend.png | ||
| ingress-tail-gzip.jpg | ||
| ingress-tail-html.jpg | ||
| ingress-tail-mixed-script.jpg | ||
| ingress-tail-rar.jpg | ||
| ingress-tail-single-nul.jpg | ||
| ingress-tail-upper-script.jpg | ||
| ingress-tail-zip-eocd.jpg | ||
| ingress-tail-zip-local.jpg | ||
| ingress-truncated.jpg | ||
| ingress-zip-polyglot.jpg | ||
| synthetic-type4.jpg | ||
