starred/coolify
1
0
Fork 0
mirror of https://github.com/coollabsio/coolify.git synced 2026-08-28 10:05:25 -05:00
Code Issues Packages Projects Releases Wiki Activity
16,820 Commits 90 Branches 697 Tags
v4.3.11
Commit Graph
2 Commits
Author SHA1 Message Date
Andras Bacsai c7f014017b Improve outbound URL validation 2026-07-02 14:46:46 +02:00
Andras Bacsai 0b8c75f8ed fix(webhooks): add validation to block unsafe webhook URLs 
Prevent server-side request forgery (SSRF) attacks by validating webhook URLs before sending requests. Blocks loopback addresses, cloud metadata endpoints, and localhost URLs.

- Add SafeWebhookUrl rule validation in SendWebhookJob.handle()
- Log warning when unsafe URLs are rejected
- Add comprehensive unit tests covering valid and invalid URL scenarios
 2026-03-28 14:23:08 +01:00