You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Steven 150371d211 fix(webhook): remediate SSRF vulnerability in webhook dispatcher ... - Add plugin/webhook/validate.go as single source of truth for SSRF protection: reserved CIDR list parsed once at init(), isReservedIP(), and exported ValidateURL() used at registration/update time - Replace unguarded http.Client in webhook.go with safeClient whose Transport uses a custom DialContext that re-resolves hostnames at dial time, defeating DNS rebinding attacks - Call webhook.ValidateURL() in CreateUserWebhook and both UpdateUserWebhook paths to reject non-http/https schemes and reserved/private IP targets before persisting - Strip internal service response body from non-2xx error log messages to prevent data leakage via application logs		3 months ago
..
test	chore: fix static check linter warnings	4 months ago
acl_config.go	fix: allow guests to view public memo comments	5 months ago
acl_config_test.go	refactor: user auth improvements (#5360)	5 months ago
activity_service.go	fix: gracefully handle deleted memos in activity service to prevent inbox crashes	4 months ago
attachment_exif_test.go	feat: implement EXIF metadata stripping for image uploads	4 months ago
attachment_service.go	fix: add access control checks for attachments, comments, and reactions	4 months ago
auth_service.go	feat: implement refresh token rotation with sliding window sessions in the auth service	5 months ago
auth_service_client_info_test.go	refactor: remove deprecated Sessions and AccessTokens settings	5 months ago
common.go	refactor: migrate HOST roles to ADMIN	4 months ago
connect_handler.go	refactor: migrate to connect-rpc (#5338)	6 months ago
connect_interceptors.go	fix: add nil check for AnyResponse in WrapUnary method to prevent caching issues	4 months ago
connect_services.go	refactor: remove deprecated Sessions and AccessTokens settings	5 months ago
header_carrier.go	fix(backend): correct generic type parameter in withHeaderCarrier helper	6 months ago
health_service.go	refactor(store): remove deprecated migration_history table and backward compatibility code	6 months ago
idp_service.go	refactor: migrate HOST roles to ADMIN	4 months ago
instance_service.go	feat: update instance profile to use admin user instead of initialized flag	4 months ago
memo_attachment_service.go	fix: add access control checks for attachments, comments, and reactions	4 months ago
memo_relation_service.go	fix: replace echo.NewHTTPError with status.Errorf	4 months ago
memo_service.go	fix: replace echo.NewHTTPError with status.Errorf	4 months ago
memo_service_converter.go	refactor: rename workspace to instance throughout codebase	7 months ago
memo_service_filter.go	refactor: deprecate old filter	10 months ago
reaction_service.go	fix: add access control checks for attachments, comments, and reactions	4 months ago
resource_name.go	refactor: nest reaction resource names under memos	5 months ago
shortcut_service.go	fix: replace echo.NewHTTPError with status.Errorf	4 months ago
user_service.go	fix(webhook): remediate SSRF vulnerability in webhook dispatcher	3 months ago
user_service_stats.go	perf: optimize memory usage for statistics and image processing	5 months ago
v1.go	chore: upgrade Echo v4 to v5.0.3	4 months ago