warmbly/internal/pkg/safehttp at 9be5c8a3c32aad57d5656e543d3611bb7fcb12cf - warmbly - Gitea: Git with a cup of tea

starred/warmbly

mirror of https://github.com/warmbly/warmbly.git synced 2026-11-03 16:16:59 +00:00

Files

T

History

Matthew Meszaros d7bacf6112 feat: check every mailbox SMTP and IMAP dial against its resolved peer address in netbind, refusing loopback, private, link-local, CGNAT, multicast and metadata addresses on hosted production and wherever MAIL_ALLOW_PRIVATE_HOSTS=false, render that resolved policy into each joining node's env, and honour WARMBLY_ALLOW_UNSAFE_WEBHOOK_URLS only on self-hosted or development instances

2026-10-23 16:02:52 +02:00

..

safehttp_test.go

feat: proxy dashboard and editor image previews with SSRF-safe bounded fetching while preserving original customer email URLs

2026-10-06 07:28:25 +00:00

safehttp.go

feat: check every mailbox SMTP and IMAP dial against its resolved peer address in netbind, refusing loopback, private, link-local, CGNAT, multicast and metadata addresses on hosted production and wherever MAIL_ALLOW_PRIVATE_HOSTS=false, render that resolved policy into each joining node's env, and honour WARMBLY_ALLOW_UNSAFE_WEBHOOK_URLS only on self-hosted or development instances

2026-10-23 16:02:52 +02:00