You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Steven 150371d211 fix(webhook): remediate SSRF vulnerability in webhook dispatcher ... - Add plugin/webhook/validate.go as single source of truth for SSRF protection: reserved CIDR list parsed once at init(), isReservedIP(), and exported ValidateURL() used at registration/update time - Replace unguarded http.Client in webhook.go with safeClient whose Transport uses a custom DialContext that re-resolves hostnames at dial time, defeating DNS rebinding attacks - Call webhook.ValidateURL() in CreateUserWebhook and both UpdateUserWebhook paths to reject non-http/https schemes and reserved/private IP targets before persisting - Strip internal service response body from non-2xx error log messages to prevent data leakage via application logs		3 months ago
..
cron	chore: fix some typos in comments (#5332)	6 months ago
email	refactor(db): rename tables for clarity - resource→attachment, system_setting→instance_setting	5 months ago
filter	fix: add Unicode case-insensitive search for SQLite (#5559)	4 months ago
httpgetter	refactor: attachment service part2	12 months ago
idp	chore: simplify attachment file writing	5 months ago
markdown	fix: allow ampersand in tags to support compound tags	4 months ago
scheduler	chore: simplify attachment file writing	5 months ago
storage/s3	perf: optimize memory usage for statistics and image processing	5 months ago
webhook	fix(webhook): remediate SSRF vulnerability in webhook dispatcher	3 months ago