5 Commits

Author	SHA1	Message	Date
Chris	7360d0b08a	feat: add fullpage and maxheight parameters for enhanced screenshot options	2026-04-24 15:43:08 +02:00
Chris	6973522c45	fix: block non-http(s) schemes, sanitize API_KEY backslash, improve viewport error message ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-21 12:48:18 +02:00
Chris	9295115742	fix: use hash_equals for API key comparison and update config documentation ... - Replace direct API key comparison with hash_equals() to prevent timing oracle attacks - Update CLAUDE.md to document all config options (URL, API_KEY, BLOCK_PRIVATE_IPS) - Add placeholder defines to src/config.inc.php for local dev (not committed due to .gitignore) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-21 12:17:34 +02:00
Chris	efc9e6510c	feat: optional API key auth via X-API-Key header or ?key= param	2026-04-21 12:11:23 +02:00
Chris	4a548f50e7	fix: update URL format in docker-compose and enhance error handling in http2pic class	2026-04-19 21:27:04 +02:00