FrogFind at frogfind.8088retro.com
Deployed 2026-10-16 for 8088retro.
Based on https://github.com/ActionRetro/FrogFind
Upstream commit: d70edb9f2e6c098db3f44943cd671ddcf3088ff9
License: GPL-3.0; original LICENSE and attribution retained.

Deployment changes:
- Homepage frog GIF from FrogFindPlusPlus; see IMAGE-PROVENANCE.json.
- Bounded cURL fetches, public IPv4 targets only, ports 80/443, DNS pinning,
  per-redirect validation, download size/time limits; private, shared and
  local server addresses denied. IPv6-only destinations are unsupported.
- Escaped form/title/search output; article markup rebuilt with an allowlist.
- DuckDuckGo result extraction via DOM; explicit provider/challenge failures.
- Reader handles HTML content-type parameters and no longer requires HEAD
  Content-Length. Arbitrary binary passthrough is disabled.
- Image decoding is bounded; JPEG/PNG/GIF converted to at most 300x200 GIF
  for retro clients, preserving aspect ratio.
- Homepage has a direct web-address reader form.
- No JavaScript, CSS dependencies, cookies, or HTTP-to-HTTPS redirect.

Search depends on DuckDuckGo's availability and may be challenged/rate-limited.
This is an independent instance, not the original frogfind.com service.
Instance source and dependency lock are available in source.tar.gz.
