liyachen 074ecf9bc9 fix: close trailing-dot bypass in private-host check ... new URL() keeps the trailing dot on FQDN hostnames ('localhost.', 'printer.local.') while stripping it from IPv4, so those slipped past the loopback/.local literal checks. Strip one trailing dot before the compares. Found in final whole-branch review. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-18 18:15:20 -04:00
..
__mocks__	feat(settings): bundle bilingual SOPs with one-click install into <base>/SOPs	2026-07-16 21:01:18 -04:00
bundled-sops.test.ts	feat(sop): built-in SOPs on by default with per-mode customize fork	2026-07-16 21:53:50 -04:00
clip-router.test.ts	fix: harden frontmatter and body interpolation against injection	2026-07-18 18:03:23 -04:00
clip-validate.test.ts	fix: harden frontmatter and body interpolation against injection	2026-07-18 18:03:23 -04:00
contract.test.ts	fix: match notes via metadataCache so Properties edits don't orphan them	2026-07-18 17:51:40 -04:00
gallery-model.test.ts	feat(gallery): show video publish date on cards, clip date as fallback	2026-07-17 18:11:34 -04:00
i18n.test.ts	feat: i18n module with bundled en/zh locale files	2026-07-13 19:45:26 -04:00
server.test.ts	fix: handle client aborts during request body read	2026-07-18 18:09:47 -04:00
settings.test.ts	fix: clamp out-of-range persisted port to the default	2026-07-18 14:26:04 -04:00
util.test.ts	fix: close trailing-dot bypass in private-host check	2026-07-18 18:15:20 -04:00
video-note.test.ts	test: lock null title never renders '# undefined'	2026-07-18 18:05:27 -04:00