alternative deviantart frontend, no javascript. go. http://git.krz.sh/krz/skunky-art.git/atom?h=v1.3.5 2026-07-15T08:17:09+00:00 2026-07-15T08:17:09+00:00 Christian Cleberg hello@cleberg.net 2026-07-15T08:17:09+00:00 urn:sha1:83d9cd0b7a3e0ec6beb5c889102211567a6db03f Two independent faults made every image fail while pages still rendered. config.example.json shipped download-proxy=http://127.0.0.1:8080. Only media fetches go through that proxy — pages reach DeviantArt via devianter on the default transport — so when nothing listens there, images 502 and the rest of the page looks fine. In a scratch container 127.0.0.1 is the container itself, so the default could never work under Docker. Unset it and document that it must stay empty unless an operator really runs a proxy. Host was a package global reassigned by every request, so a concurrent request could overwrite it mid-render and emit URLs on another origin's host and port. The instance's own default-src 'self' CSP then blocked those images. Thread the request's host through skunkyart instead, and take it as an explicit argument in URLBuilder, ParseMedia, ParseDescription, BuildUserPlate and ConvertDeviantArtURLToSkunkyArt. Feeds keep their absolute URLs. Also start RefreshInstances after ExecuteConfig rather than before it: the goroutine read CFG while json.Unmarshal was writing it (a race the detector flags), and its fetch escaped both the throttle and the configured User-Agent. Verified: 300 concurrent requests with distinct Host headers now round-trip their own host (was 1 leak per 300), go test -race is clean, and cache+proxy both enabled serves 200 image/jpeg cold and from cache. 2026-07-15T06:58:41+00:00 Christian Cleberg hello@cleberg.net 2026-07-15T06:54:26+00:00 urn:sha1:b1ad14553277d9d72a5e4b4462a52a2e2d0fdbb1 2026-07-15T01:28:02+00:00 Christian Cleberg hello@cleberg.net 2026-07-15T01:28:02+00:00 urn:sha1:0aff13949a8e9e120a585f00627ef6959f8e0635 Upstream references still pointed at git.macaw.me, which is unmaintained and whose instances.json is a dead link. Repoint them at this repo: - RefreshInstances now fetches instances.json from raw.githubusercontent - source/version links in index.htm, about.htm, and CLI help use the GitHub releases tag URL - SETUP.md/SETUP-RU.md language switch links were Gitea-absolute paths that 404 on GitHub; make them relative - --add-instance message says 'main' branch, matching this repo The fork attribution in README.md is left as-is: it credits upstream rather than pointing at the source. 2025-04-07T10:53:47+00:00 lost+skunk me@lost-skunk.cc 2025-04-07T10:53:47+00:00 urn:sha1:210c69e48c2af4d1fdb53c0654ed33a21688696c 2024-09-23T06:38:32+00:00 lost+skunk skunky@ebloid.ru 2024-09-23T06:38:32+00:00 urn:sha1:191984b31ef228c4077904a2831a2af593352670 2024-08-13T12:59:52+00:00 lost+skunk skunky@ebloid.ru 2024-08-13T12:59:52+00:00 urn:sha1:1537da9b16dfda1ecb2730b5d1de3b9005397618 2024-08-01T19:48:05+00:00 lost+skunk skunky@ebloid.ru 2024-08-01T19:48:05+00:00 urn:sha1:c5514c3875b9b782688047d547dfd6663a5b77bb