pax 8f9e4f7e65 security: fix #8 — drop duplicate MAX_IMAGE_PIXELS set from cache.py ...

The cap is now installed by core/__init__.py (previous commit), so
the line in cache.py is redundant. Removing it leaves a single
authoritative location for the security-critical PIL setting.

Audit-Ref: SECURITY_AUDIT.md finding #8
Severity: Low

2026-04-11 16:21:37 -05:00

..

api

security: fix #3 — redact params in GelbooruClient debug log

2026-04-11 16:13:25 -05:00

__init__.py

security: fix #8 — install MAX_IMAGE_PIXELS cap in core/__init__.py

2026-04-11 16:21:32 -05:00

cache.py

security: fix #8 — drop duplicate MAX_IMAGE_PIXELS set from cache.py

2026-04-11 16:21:37 -05:00

concurrency.py

Route async work through one persistent loop, lock shared httpx + DB writes

2026-04-07 17:24:23 -05:00

config.py

security: fix #7 — reject Windows reserved device names in template

2026-04-11 16:20:27 -05:00

db.py

security: fix #4 — chmod SQLite DB + WAL/SHM sidecars to 0o600

2026-04-11 16:15:41 -05:00

images.py

Initial release — booru image viewer with Qt6 GUI and Textual TUI

2026-04-04 06:00:50 -05:00

library_save.py

library_save: ensure categories before template render

2026-04-09 19:18:13 -05:00