Marcel 70689b8f7b feat(ocr): add SSRF protection for PDF URL downloads ...

Validates PDF download URLs against an ALLOWED_PDF_HOSTS allowlist
(default: minio,localhost,127.0.0.1) and disables redirect following
to prevent redirect-based SSRF.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 12:29:42 +02:00

.devcontainer

fix: correct devcontainer workspace path mismatch

2026-03-15 13:44:06 +01:00

.gitea/workflows

remove e2e from pipeline. takes too long

2026-04-06 11:22:08 +02:00

.husky

chore(hooks): remove pre-push E2E hook

2026-03-22 22:15:00 +01:00

.vscode

fix: activate dev Spring profile in VS Code launch config

2026-03-15 14:17:07 +01:00

backend

feat(ocr): add unique constraint on (job_id, document_id)

2026-04-13 12:28:18 +02:00

docs

docs(adr): add ADR-001 (OCR microservice) and ADR-002 (polygon JSONB)

2026-04-12 15:07:46 +02:00

frontend

fix(frontend): normalize paraglide imports and improve accessibility

2026-04-13 12:29:00 +02:00

ocr-service

feat(ocr): add SSRF protection for PDF URL downloads

2026-04-13 12:29:42 +02:00

proofshot-artifacts

chore(screenshots): retake proofshots after bg-canvas fix

2026-03-29 19:12:14 +02:00

scripts

fix(ocr): extract PDF pages as PNGs before running kraken OCR

2026-04-12 20:37:29 +02:00

.gitignore

chore: update ignore file

2026-03-17 13:35:32 +00:00

CLAUDE.md

docs: add CODESTYLE.md with Clean Code, DRY/KISS, and SOLID principles

2026-03-20 11:36:34 +01:00

CODESTYLE.md

docs(codestyle): add Svelte 5 specific rules with examples

2026-03-20 15:58:40 +01:00

COLLABORATING.md

docs(collab): add user journey and E2E scenario requirements

2026-03-22 19:44:18 +01:00

docker-compose.ci.yml

ci: set up CI pipeline with unit, backend, and E2E test jobs

2026-03-19 12:03:37 +01:00

docker-compose.yml

fix(docker): soften ocr-service dependency and clean up compose

2026-04-13 12:29:21 +02:00

Description

No description provided

44 MiB

Languages

Python 73.1%

TypeScript 11.5%

Java 10.9%

Svelte 4.2%

Shell 0.1%