Added
- Added URL allowlist settings for original skin URLs that require re-signing:
AllowedSchemes: allowed URL schemes, defaults to["https"]AllowedDomains: allowed URL domains, defaults to[]
- When a texture is unsigned or has an invalid signature and needs to be re-signed through MineSkin, the plugin now checks that the original URL matches both the allowed scheme and domain.
- Added Chinese and English README documentation for the URL allowlist behavior and configuration.
Changed
- Textures with valid Mojang signatures are still accepted directly and are not affected by the URL allowlist.
- Unsigned or invalid external skin URLs outside the allowlist are rejected. They will not be downloaded or submitted to MineSkin.
- Bumped the version from
1.0to1.1.
Fixed
- Signature validation now handles missing signatures, invalid Base64 signatures, and invalid URLs more safely to avoid interrupting the profile handling flow.
The First Version.
