feat(canvas): opt-in local cache for plugin Canvases (#473) - #479

Merged

InstaZDLL merged 6 commits into

mainfrom

feat/473-canvas-local-cache

Aug 2, 2026

Commits on Aug 2, 2026

feat(canvas): opt-in local cache for plugin Canvases (#473)
InstaZDLL
committed
8ce04be
fix(canvas): re-validate cache-download redirects (SSRF) + doc canvas world
InstaZDLL
committed
10f904b
fix(motion-cache): strip trailing-dot hosts in SSRF guard + allow 10 redirects
InstaZDLL
committed
fff142d
fix(motion-cache): validate the initial url inside cache_mp4 (defence-in-depth)
InstaZDLL
committed
198ba47
fix(canvas): treat an unsafe cache redirect as a hard security failure
InstaZDLL
committed
8d87e8c
test(canvas): regression-test the cache_mp4 redirect hop limit
InstaZDLL
committed
b5beee6