2 Commits

Author	SHA1	Message	Date
Username	2e3ce149f9	watchd: tighten secondary check validation ... - judge blocks record as neutral (judge_block category), not success; evaluate() filters them out so they affect neither pass nor fail count - require HTTP/1.x response line for non-IRC checks; non-HTTP garbage (captive portals, proxy error pages) fails immediately - add is_public_ip() rejecting RFC 1918, loopback, link-local, and multicast ranges from judge exit IP extraction - remove 5 weak HEAD regex targets whose fingerprint headers appear on error pages and captive portals (p3p, X-XSS-Protection, x-frame-options, referrer-policy, X-UA-Compatible)	2026-02-17 18:37:38 +01:00
Username	0d7d2dce70	refactor: extract modules from proxywatchd.py ... Extract focused modules to reduce proxywatchd.py complexity: - stats.py: JudgeStats, Stats, regexes, ssl_targets (557 lines) - mitm.py: MITMCertStats, cert extraction functions (239 lines) - dns.py: socks4_resolve with TTL caching (86 lines) - job.py: PriorityJobQueue, calculate_priority (103 lines) proxywatchd.py reduced from 2488 to 1591 lines (-36%).	2025-12-28 15:45:24 +01:00