/api/art remembered a failed image for an hour, whatever the failure, so
an image that could never pass was fetched again on the next view after
that. In 2026-11-09..13, five images over the 20 MB limit were fetched
146 times, each read 20 MB chunk by chunk before being refused, about
3 GB for nothing; a 400 from b2c-contenthub.com was asked for 34 times.
Now a Content-Length over the limit is refused before the body is read,
and a failure that will still hold tomorrow is remembered for a day: a
4xx other than 408 and 429, or ipx's own refusal (too large, not an
image). Timeouts, 5xx and dropped connections still retry in an hour.
JPEG XL, which shkspr.mobi sends as application/octet-stream, was
refused as not an image; its two signatures are sniffed now, and Safari
shows it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
rays
0222c0b69a