12 Commits (main)

Author	SHA1	Message	Date
Steven	150371d211	fix(webhook): remediate SSRF vulnerability in webhook dispatcher ... - Add plugin/webhook/validate.go as single source of truth for SSRF protection: reserved CIDR list parsed once at init(), isReservedIP(), and exported ValidateURL() used at registration/update time - Replace unguarded http.Client in webhook.go with safeClient whose Transport uses a custom DialContext that re-resolves hostnames at dial time, defeating DNS rebinding attacks - Call webhook.ValidateURL() in CreateUserWebhook and both UpdateUserWebhook paths to reject non-http/https schemes and reserved/private IP targets before persisting - Strip internal service response body from non-2xx error log messages to prevent data leakage via application logs	1 day ago
Johnny	f66c750075	chore: simplify attachment file writing	2 months ago
johnnyjoy	976bd332fe	chore: fix linter	8 months ago
johnnyjoy	d6a75bba4c	refactor: webhook service	8 months ago
Steven	f12d7ae8bc	chore: add asynchronous webhook dispatch	9 months ago
Steven	f33571fec6	feat: update webhook request payload	2 years ago
Steven	2e0d5412b4	chore: tweak webhook payload	2 years ago
Steven	6010139291	chore: remove unused	2 years ago
Steven	775b79338d	chore: update object in s3	2 years ago
Steven	7c5261b5d2	chore: tweak resource definition	2 years ago
Bryan	4aa4417d91	chore: allow all 20x response status code in webhook (#2947)	2 years ago
Steven	bc965f6afa	chore: implement webhook dispatch in api v1	2 years ago