You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Steven 150371d211 fix(webhook): remediate SSRF vulnerability in webhook dispatcher ... - Add plugin/webhook/validate.go as single source of truth for SSRF protection: reserved CIDR list parsed once at init(), isReservedIP(), and exported ValidateURL() used at registration/update time - Replace unguarded http.Client in webhook.go with safeClient whose Transport uses a custom DialContext that re-resolves hostnames at dial time, defeating DNS rebinding attacks - Call webhook.ValidateURL() in CreateUserWebhook and both UpdateUserWebhook paths to reject non-http/https schemes and reserved/private IP targets before persisting - Strip internal service response body from non-2xx error log messages to prevent data leakage via application logs		1 day ago
..
cron	…
email	refactor(db): rename tables for clarity - resource→attachment, system_setting→instance_setting	2 months ago
filter	fix: add Unicode case-insensitive search for SQLite (#5559)	3 weeks ago
httpgetter	…
idp	chore: simplify attachment file writing	2 months ago
markdown	fix: allow ampersand in tags to support compound tags	2 weeks ago
scheduler	chore: simplify attachment file writing	2 months ago
storage/s3	…
webhook	fix(webhook): remediate SSRF vulnerability in webhook dispatcher	1 day ago