v0.34.6

src/admin/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "RustProxy Administration API",
-    "version": "0.34.5",
+    "version": "0.34.6",
     "description": "Administration API for the active panel origin. Sign in through the panel; the same-origin HttpOnly cookie authenticates all private operations. Mutations also require the exact Origin, X-RustProxy-Request: 1 and a session-bound X-CSRF-Token. Loopback HTTP is the default; Settings can enable HTTPS before using a non-loopback administration bind. This document contains no live configuration or credentials. Object schemas marked extensible are summaries: full configuration validation is authoritative in Rust. The API also permits explicitly scoped GeneralApiBearer tokens on a narrow route allowlist, with RO/RW and source CIDR checks; API-token management and Prometheus-token management are browser-session-only."
   },
   "servers": [
@@ -503,6 +503,27 @@
           "method_policy": {
             "$ref": "#/components/schemas/MethodPolicy"
           },
+          "content_type_policy": {
+            "type": "object",
+            "description": "Ordinary Vhost request Content-Type denylist. Matching ignores case and MIME parameters; evaluated before Web Server/PHP and origin handling. Disabled by default. Missing Content-Type is allowed; ambiguous/invalid Content-Type is rejected when enabled.",
+            "additionalProperties": false,
+            "properties": {
+              "enabled": {
+                "type": "boolean",
+                "default": false
+              },
+              "blocked": {
+                "type": "array",
+                "maxItems": 64,
+                "default": [],
+                "items": {
+                  "type": "string",
+                  "maxLength": 255,
+                  "description": "MIME type/subtype or type/* (e.g. multipart/form-data, application/*)."
+                }
+              }
+            }
+          },
           "basic_auth": {
             "type": "object",
             "properties": {},
@@ -13662,4 +13683,4 @@
     }
   },
   "tags": []
-}
+}