• 0 Posts
  • 66 Comments
Joined 1 year ago
cake
Cake day: May 22nd, 2025

help-circle

  • Apparently it has to be kid friendly if it includes the Muppets. Remember the Muppets sitcom, where Piggy has a TV show and all the parents sent letters into the studio complaining that the show wasn’t for kids or something stupid.

    I loved that show. The Muppets is for adults now, it was for us as kids with Sesame Street, The Muppet Show and all the Saturday morning cartoons. And the adult sitcom was a great addition until stupid parents happened.





  • I have AuDHD and I can’t remember a damn thing. Unless it happened 30 years ago, then it’s photographic with built in zoom.

    But I tend to build muscle memory about stores I frequent. My Walmart redesigned twice in 6 months. And now I just do Walmart delivery because I can’t deal with how it’s now laid out














    1. Fixed credential-exfiltration risk in /api/proxy/image: Previously the endpoint could:
    • accept arbitrary auth_id
    • load stored API keys
    • forward them to attacker-controlled URLs
    1. Enforced outbound host allowlist globally Previously:
    • allowlist existed
    • but outgoingFetch() didn’t enforce it
    • plugins/engines could bypass it
    1. Fixed extension store path traversal Previously a malicious store manifest could:
    • inject … paths
    • escape install directories
    • reference arbitrary files
    1. Hardened proxy IP trust Previously:
    • rate limiting trusted any X-Forwarded-For header
    • clients could spoof their IP
    1. Fixed inconsistent settings authentication Previously:
    • settings UI stored an auth token
    • but the settings modal didn’t send it when saving
    1. Implemented Improved proxy deployment support
    • Added proxy-aware behavior:
    • DEGOOG_PUBLIC_BASE_URL for canonical URLs
    • secure cookie handling when X-Forwarded-Proto=https

    Additional Improvements:

    • suggestion fetching hardened
    • DuckDuckGo suggestion parsing fixed
    • unified outbound request handling
    • install state guard properly cleaned up

    Made some other changes for my specific deployment. Very happy with your work so far. Thanks so much