2 Commits

Author	SHA1	Message	Date
google-labs-jules[bot]	5b41d32f90	🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in webhooks ... Adds validation to webhook URLs before attempting to deliver them to prevent SSRF attacks targeting private IP ranges, local host, and cloud metadata endpoints. Validates URL schema, hostname, and applies `is_private_ip()`. Also resolved ruff linting errors. Tests have been expanded to ensure validation covers all cases. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-05-17 15:04:09 +00:00
copilot-swe-agent[bot]	78204c2490	test(notifications): improve coverage for user_notification.py to 100% ... Add 22 new unit tests in tests/test_user_notification_service.py covering all previously-uncovered branches in app/utils/user_notification.py: - create_in_app_notification: exception/rollback path - _send_email_notification: SMTP success (TLS+creds, no-TLS, no-creds), SMTP exception, sender_email fallbacks - _send_webhook_notification: success with/without secret, HTTP errors - dispatch_user_notification: email/webhook pref dispatch, no target_id skip, inactive target skip, invalid JSON config, null config, outer exception handling, push notification sent/exception, unknown channel_type Combined coverage: 49.52% → 100% Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-12 00:44:59 +00:00