aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
20 hoursfeat: store a whitelist of publishable headers in the manifestDanilo M.6-1/+211
20 hoursdocs: plan the report implementationDanilo M.1-0/+1536
21 hoursdocs: settle the report specDanilo M.1-0/+412
21 hoursdocs: document the queried key, mark server as unbuiltDanilo M.1-4/+21
29 hoursdocs: point at the author's idea note, and log its first itemDanilo M.2-0/+52
29 hoursdocs: record the fourth property and the contacts commandDanilo M.4-33/+170
29 hourstest: make the offline resolve check tamper-evidentDanilo M.1-0/+7
29 hourstest: prove the suite still opens no socketDanilo M.1-0/+76
29 hoursfix: keep ":" literal so an IPv6 query is not over-encodedDanilo M.2-10/+34
30 hoursfeat: add the contacts subcommandDanilo M.2-1/+126
30 hoursfix: percent-encode the component interpolated into an RDAP queryDanilo M.2-2/+112
30 hoursfix: refuse an ipv6 scope id, and say why a value was refusedDanilo M.2-11/+112
30 hoursfix: validate a query host at the one point a query is admittedDanilo M.2-1/+152
30 hourstest: make two rdap tests able to fail, and cover the hostile bootstrapDanilo M.1-2/+106
30 hoursfix: treat the IANA bootstrap as hostile, not as trusted inputDanilo M.1-9/+60
30 hoursfeat: resolve the worklist to abuse contactsDanilo M.2-0/+186
30 hoursfeat: build the contacts worklist, host onlyDanilo M.2-0/+221
30 hoursdocs: correct the Accept header and the dependency claimDanilo M.2-6/+11
30 hoursdocs: amend the contacts plan after task 1 to 5Danilo M.1-4/+26
30 hoursfeat: query RDAP, walking up the labels for a registrable domainDanilo M.2-0/+133
30 hoursfeat: read abuse addresses from a jCard, strictlyDanilo M.2-0/+172
30 hoursfeat: select an RDAP server by longest prefix and by TLDDanilo M.2-0/+103
30 hoursfeat: cache the IANA bootstrap, and prefer a stale copy to noneDanilo M.2-0/+132
30 hoursfeat: add the RDAP transport, with a redirect cap and no downgradeDanilo M.2-0/+128
30 hoursdocs: plan the contacts implementationDanilo M.2-4/+1989
30 hoursdocs: spec the contacts subcommandDanilo M.2-0/+349
47 hoursdocs: record the real-mail sweep and open a backlogDanilo M.2-0/+78
47 hoursfeat: report List-Unsubscribe urls and a differing SenderDanilo M.4-2/+53
47 hoursfeat: flag an address spoofed into a display nameDanilo M.2-1/+64
47 hoursfix: take the sender domain from the address, not the display nameDanilo M.3-4/+38
48 hoursfix: prefer the observed address over an attacker's HELO literalDanilo M.2-9/+49
48 hoursfix: re-bracket an IPv6 host when stripping URL userinfoDanilo M.2-2/+24
48 hoursfix: redact a valueless query token whole, not as a kept nameDanilo M.3-5/+63
48 hourstest: wire leaky.eml into the anti-leak suite (red, defect 2)Danilo M.2-1/+29
2 daysdocs: AGENTS.md, with CLAUDE.md pointing at itDanilo M.2-0/+259
2 daysdocs: README covers init and parseDanilo M.1-10/+83
2 daysfix: validate each setup answer at the prompt that asked for itDanilo M.1-34/+101
2 daysfeat: command line for init and parseDanilo M.3-0/+401
2 daysfeat: first-run config builderDanilo M.2-0/+480
2 daysfix: reject non-list relays and empty cases valuesDanilo M.2-2/+49
2 daysfeat: read and validate the configDanilo M.2-0/+174
2 daysrefactor: one URL scan serving both the report and the flaggingDanilo M.1-29/+24
2 daysfeat: assemble IOCs in the manifest's shapeDanilo M.2-0/+168
2 daysfeat: case directory with an atomically written manifestDanilo M.2-0/+234
2 daysfeat: extract URLs and attachment hashes, fetching nothingDanilo M.2-0/+181
2 daysfeat: extract sender domains and auth verdictsDanilo M.2-1/+100
2 daysfeat: walk the Received chain to the trust boundaryDanilo M.2-0/+182
2 daysfix: redact fragment and strip userinfo, flag hidden query in pathDanilo M.2-11/+111
2 daysfeat: redact recipient identifiers inside URLsDanilo M.2-0/+211
2 daystest: fixtures for the parser, documentation ranges onlyDanilo M.4-0/+81