Jakub Zych b9804ddf17 fix(17): T-17-15 apply the frontend_url rewrite only for a safe http(s) URL ...

- models.AllowedFrontendURL: empty, or an absolute http(s) URL with a host
  and without whitespace, control characters, a double quote, <, > or &
- classes.Rewrite leaves the document unchanged for a refused value,
  inserts through EscapeText/EscapeAttr and keeps a loc or href that would
  not stay an http(s) URL
- TestRewriteUnsafeFrontendURL, TestAllowedFrontendURL and a stored-row
  check in TestSitemapImportSmoke

2026-10-13 00:57:02 +02:00

..

testdata

feat(17-03): full sitemap generation, settings, hooks and import commands

2026-10-12 17:07:39 +02:00

events.go

feat(17-03): full sitemap generation, settings, hooks and import commands

2026-10-12 17:07:39 +02:00

generator_test.go

fix(17): CR-01 refuse non-http sitemap URLs on save, import and output

2026-10-12 21:28:28 +02:00

generator.go

fix(17): CR-01 refuse non-http sitemap URLs on save, import and output

2026-10-12 21:28:28 +02:00

golden_test.go

feat(17-03): full sitemap generation, settings, hooks and import commands

2026-10-12 17:07:39 +02:00

manifest_test.go

test(17-06): sitemap parity unit tests

2026-10-12 19:38:04 +02:00

manifest.go

feat(17-03): full sitemap generation, settings, hooks and import commands

2026-10-12 17:07:39 +02:00

rewrite_test.go

fix(17): T-17-15 apply the frontend_url rewrite only for a safe http(s) URL

2026-10-13 00:57:02 +02:00

rewrite.go

fix(17): T-17-15 apply the frontend_url rewrite only for a safe http(s) URL

2026-10-13 00:57:02 +02:00

serialize_test.go

test(17-06): sitemap parity unit tests

2026-10-12 19:38:04 +02:00

serialize.go

feat(17-03): sitemap plugin tracer, /sitemap.xml byte-identical to PHP

2026-10-12 16:53:09 +02:00

tiers_test.go

test(17-06): sitemap parity unit tests

2026-10-12 19:38:04 +02:00

tiers.go

feat(17-03): full sitemap generation, settings, hooks and import commands

2026-10-12 17:07:39 +02:00

urlto_test.go

fix(17): CR-01 refuse non-http sitemap URLs on save, import and output

2026-10-12 21:28:28 +02:00

urlto.go

fix(17): CR-01 refuse non-http sitemap URLs on save, import and output

2026-10-12 21:28:28 +02:00