Lukas e4c3ae718c fix(backend): relax SSRF validation for loopback in dev, graceful metrics/regexploit fallback ...

- ip_utils: allow loopback (127.0.0.1) in dev mode (BANGUI_LOG_LEVEL=debug)
  so e2e tests can reach a mock HTTP server on the host
- metrics: make all operations no-ops when prometheus_client not installed
- regex_validator: graceful fallback when regexploit not installed
- geo_cache: use attribute access instead of dict subscript for typed rows
- rate_limit: support bucket_override parameter for per-endpoint rate limits
- ban_service: construct DomainActiveBan explicitly instead of model_copy

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-08 08:07:13 +02:00

..

__init__.py

feat: Stage 1 — backend and frontend scaffolding

2026-02-28 21:15:01 +01:00

async_utils.py

TASK-028: Add exception logging to fire-and-forget asyncio.create_task()

2026-04-26 15:17:30 +02:00

client_ip.py

Normalise IP addresses across backend

2026-05-03 18:19:41 +02:00

conffile_parser.py

Move conffile_parser from services to utils

2026-03-22 14:24:24 +01:00

config_file_utils.py

refactor(ban_service): extract _bans_by_country_load_data helper

2026-05-03 17:00:34 +02:00

config_parser.py

Standardize async offloading behind shared executor helper

2026-04-11 20:40:08 +02:00

config_writer.py

fix: replace broad except Exception with specific exception types

2026-05-03 00:54:44 +02:00

constants.py

backup

2026-05-05 18:47:56 +02:00

correlation.py

Update observability docs and task utilities

2026-05-03 11:52:09 +02:00

display_sanitizer.py

backup

2026-05-04 07:20:20 +02:00

external_logging.py

fix: handle socket close errors properly in PapertrailLogHandler

2026-05-03 12:25:14 +02:00

fail2ban_client.py

backup

2026-05-05 18:47:56 +02:00

fail2ban_db_utils.py

Add fail2ban DB index management and socket-based path resolution

2026-05-03 12:17:31 +02:00

fail2ban_response.py

refactor: Extract fail2ban response utilities into shared module

2026-04-23 15:11:21 +02:00

ip_utils.py

fix(backend): relax SSRF validation for loopback in dev, graceful metrics/regexploit fallback

2026-05-08 08:07:13 +02:00

jail_config.py

Fix blocklist-import bantime, unify filter bar, and improve config navigation

2026-03-17 11:31:46 +01:00

jail_socket.py

Refactor backend services and jail configuration

2026-04-25 18:34:03 +02:00

log_sanitizer.py

Update observability docs and task utilities

2026-05-03 11:52:09 +02:00

metrics.py

fix(backend): relax SSRF validation for loopback in dev, graceful metrics/regexploit fallback

2026-05-08 08:07:13 +02:00

pagination.py

refactor: split pagination logic from response models

2026-05-03 22:57:21 +02:00

path_utils.py

TASK-020: Fix log_target security vulnerability (defense in depth)

2026-04-26 14:23:56 +02:00

rate_limiter.py

feat(rate-limiting): add per-bucket limits and startup validation

2026-05-03 20:53:21 +02:00

regex_validator.py

fix(backend): relax SSRF validation for loopback in dev, graceful metrics/regexploit fallback

2026-05-08 08:07:13 +02:00

runtime_state.py

refactor(backend): external logging metrics, required mode, health checks

2026-05-04 03:45:13 +02:00

scheduler_lock.py

Fix HIGH priority issues: unbounded queries, rate limiting, health checks

2026-05-01 21:47:36 +02:00

session_cache.py

fix(auth): invalidate session cache on login

2026-05-03 20:51:51 +02:00

setup_state.py

Move runtime application state into a dedicated runtime state manager

2026-04-10 19:07:35 +02:00

setup_utils.py

Remove repository import from setup_utils and move password-hash helper to setup service

2026-04-17 15:38:41 +02:00

time_utils.py

Fix pagination metadata return structure and test assertions

2026-05-01 15:42:05 +02:00