3 Commits

Author	SHA1	Message	Date
Lukas	e4c3ae718c	fix(backend): relax SSRF validation for loopback in dev, graceful metrics/regexploit fallback ... - ip_utils: allow loopback (127.0.0.1) in dev mode (BANGUI_LOG_LEVEL=debug) so e2e tests can reach a mock HTTP server on the host - metrics: make all operations no-ops when prometheus_client not installed - regex_validator: graceful fallback when regexploit not installed - geo_cache: use attribute access instead of dict subscript for typed rows - rate_limit: support bucket_override parameter for per-endpoint rate limits - ban_service: construct DomainActiveBan explicitly instead of model_copy Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-08 08:07:13 +02:00
Lukas	0817a4cb47	fix(regex_validator): add ReDoS detection via regexploit ... Detect catastrophic backtracking patterns before regex compilation using regexploit library. Add ReDoSDetectedError exception and _MINIMUM_STARRINESS threshold (>=3) to catch dangerous patterns like (a+)+b. Update pyproject.toml deps, add tests for detection.	2026-05-03 00:05:33 +02:00
Lukas	60d9c5b340	Refactor filter configuration with regex validation ... - Add regex validation utility for query strings - Update filter_config_service to use regex validation - Add comprehensive test coverage for regex validator - Update exception handling for validation errors - Update documentation for tasks Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-05-01 18:17:12 +02:00