3 Commits

Author	SHA1	Message	Date
google-labs-jules[bot]	06b0fced38	🛡️ Sentinel: [HIGH] Fix SSRF bypass on DNS resolution failure ... Modified `is_private_ip` in `app/utils/network.py` to fail securely by returning True (blocking the request) when a hostname cannot be resolved. The previous implementation failed open, creating a risk for Server-Side Request Forgery (SSRF) and DNS rebinding attacks. Updated corresponding tests to expect the secure behavior and correctly appended the security finding to the Sentinel journal. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-23 15:25:53 +00:00
github-actions[bot]	b7a195d3bc	style: apply ruff auto-fix ... - Auto-formatted code with ruff format - Applied ruff linting fixes with --fix Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-03-15 04:10:28 +00:00
google-labs-jules[bot]	8079db7893	🛡️ Sentinel: [HIGH] Fix SSRF in WebDAV connection test ... Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-15 04:10:11 +00:00