rcourtman bb47e1831c security: SSRF protection for webhook URLs ...

- Add DNS resolution validation to block webhooks to internal IPs
- Validate hostname resolves before accepting webhook URL
- Block metadata endpoints (AWS, GCP, Azure)
- Block localhost, private IPs, and reserved ranges
- Add context timeout for DNS lookups (2s)

2026-01-22 00:42:23 +00:00

..

audit_test.go

feat(audit): Add audit log API endpoints and UI with signature verification

2026-01-08 19:19:57 +00:00

audit.go

feat(enterprise): add Advanced Reporting and Audit Webhooks integration

2026-01-09 21:31:49 +00:00

export_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

export.go

refactor: Add testability improvements to core packages

2026-01-19 19:25:38 +00:00

signer_test.go

feat(audit): add comprehensive audit logging system

2026-01-12 15:20:33 +00:00

signer.go

feat(audit): add comprehensive audit logging system

2026-01-12 15:20:33 +00:00

sqlite_logger_test.go

feat(audit): add comprehensive audit logging system

2026-01-12 15:20:33 +00:00

sqlite_logger.go

fix: use pure Go SQLite driver for arm64 compatibility

2026-01-21 18:58:23 +00:00

webhook.go

security: SSRF protection for webhook URLs

2026-01-22 00:42:23 +00:00