JustEnoughSkins

Added

- Added URL allowlist settings for original skin URLs that require re-signing: - AllowedSchemes: allowed URL schemes, defaults to ["https"] - AllowedDomains: allowed URL domains, defaults to [] - When a texture is unsigned or has an invalid signature and needs to be re-signed through MineSkin, the plugin now checks that the original URL matches both the allowed scheme and domain. - Added Chinese and English README documentation for the URL allowlist behavior and configuration.

Changed

- Textures with valid Mojang signatures are still accepted directly and are not affected by the URL allowlist. - Unsigned or invalid external skin URLs outside the allowlist are rejected. They will not be downloaded or submitted to MineSkin. - Bumped the version from 1.0 to 1.1.

Fixed

- Signature validation now handles missing signatures, invalid Base64 signatures, and invalid URLs more safely to avoid interrupting the profile handling flow.