sandrodachandClaude Opus 5.5 62463bc6fd fix(security): SSRF protection for alarm webhooks (FLAW-05) ...

Discord and custom webhook URLs are checked when saved and before every
call: https only, Discord URLs must point to discord.com. A guarded HTTP
client resolves hosts itself and connects only to allowed IPs; localhost,
link-local and cloud metadata are always blocked, LAN ranges (incl.
Tailscale CGNAT) and plain http only with the new admin switch.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 07:37:39 +01:00

..

docsync_test.go

feat(notes): compact the operation log and purge old tombstones

2026-10-28 15:08:13 +01:00

docsync.go

feat(notes): compact the operation log and purge old tombstones

2026-10-28 15:08:13 +01:00

mail_test.go

fix(smtp): AUTH LOGIN fallback when PLAIN is refused

2026-10-29 00:09:27 +01:00

mail.go

fix(smtp): AUTH LOGIN fallback when PLAIN is refused

2026-10-29 00:09:27 +01:00

netguard_test.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00

netguard.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00

realtime_test.go

feat(notes): push, long polling and fallback detection for note sync

2026-10-28 14:10:29 +01:00

server_test.go

chore(db): stop wiping databases with an older schema version

2026-10-29 06:43:51 +01:00

server.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00