memos

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

History

Steven 150371d211 fix(webhook): remediate SSRF vulnerability in webhook dispatcher - Add plugin/webhook/validate.go as single source of truth for SSRF protection: reserved CIDR list parsed once at init(), isReservedIP(), and exported ValidateURL() used at registration/update time - Replace unguarded http.Client in webhook.go with safeClient whose Transport uses a custom DialContext that re-resolves hostnames at dial time, defeating DNS rebinding attacks - Call webhook.ValidateURL() in CreateUserWebhook and both UpdateUserWebhook paths to reject non-http/https schemes and reserved/private IP targets before persisting - Strip internal service response body from non-2xx error log messages to prevent data leakage via application logs		2 days ago
..
validate.go	fix(webhook): remediate SSRF vulnerability in webhook dispatcher	2 days ago
webhook.go	fix(webhook): remediate SSRF vulnerability in webhook dispatcher	2 days ago
webhook_test.go	chore: implement webhook dispatch in api v1	2 years ago