mirror of
https://github.com/saphid/frame-control.git
synced 2026-10-14 13:01:15 +02:00
saphidandClaude Opus 5.5
2cfb61a208
- public_apk takes a check(url) callback run on every hop, before any lookup or connection; the itch.io download passes its key refusal, so a later redirect carrying the key (or ?api_key=) is refused too. - One redaction function removes the key and its 8+ character starts in any letter case, with each character literal or percent-encoded (either hex case); used for every itch.io message, keeping error type and retry_after. - IPv4 is an allow-list too: the whole special-purpose blocks (incl. 192.0.0.0/24, which Python 3.9 partly calls global) are refused besides requiring is_global. - No watchdog thread: connect and TLS handshake each get what is left of the shared deadline as their socket timeout, then the normal read timeout, so nothing can shut a connection after it has been handed over. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>