Marcel 70689b8f7b feat(ocr): add SSRF protection for PDF URL downloads ...

Validates PDF download URLs against an ALLOWED_PDF_HOSTS allowlist
(default: minio,localhost,127.0.0.1) and disables redirect following
to prevent redirect-based SSRF.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 12:29:42 +02:00

..

engines

fix(ocr): use 1-based page numbers to match frontend PDF viewer

2026-04-13 10:32:08 +02:00

.dockerignore

fix(docker): soften ocr-service dependency and clean up compose

2026-04-13 12:29:21 +02:00

confidence.py

feat(ocr): per-script-type confidence thresholds

2026-04-12 20:50:59 +02:00

Dockerfile

fix(ocr): add pyvips for kraken PDF input support

2026-04-12 20:11:14 +02:00

main.py

feat(ocr): add SSRF protection for PDF URL downloads

2026-04-13 12:29:42 +02:00

models.py

fix(ocr): use camelCase field names in Pydantic models

2026-04-12 23:04:42 +02:00

requirements.txt

fix(ocr): add pyvips for kraken PDF input support

2026-04-12 20:11:14 +02:00

test_confidence.py

feat(ocr): per-script-type confidence thresholds

2026-04-12 20:50:59 +02:00

test_engines.py

test(ocr): add business-logic tests for polygon extraction, Kraken routing, and confidence markers

2026-04-13 10:34:23 +02:00

test_stream.py

feat(ocr): add SSRF protection for PDF URL downloads

2026-04-13 12:29:42 +02:00