Matthew MeszarosandDevin AI 925e0edc31 feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs ...

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-06 07:28:25 +00:00

..

api

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

development

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

guides

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

learn

feat: bound user-authored templates (range only over data fields, two-deep nesting, no template calls, 1 MiB output, capped compile cache) for campaign and automation rendering, accept only single addresses and single Message-IDs for to/cc/bcc/in_reply_to on every send path with invalid_recipient and invalid_message_id, refuse multi-line headers in the Gmail, Graph and SMTP writers, always apply a no-script CSP and drop non-http(s)/mailto/tel link targets in email previews, treat only single-slash paths as internal Remie links, accept integration OAuth callbacks only from the API origin, and follow only http(s) form redirects and app install links

2026-10-04 03:02:37 -07:00

meta.json

Publish development docs to docs.warmbly.com

2026-06-28 13:25:08 +02:00