google-labs-jules[bot]
d22175310a
🚨 Severity: HIGH 💡 Vulnerability: User-provided IMAP `host` in `_test_imap_connection` and `pull_inbox` was not validated against private IPs, creating an SSRF risk. 🎯 Impact: Attackers could abuse the endpoints to port-scan or interact with internal/private network services. 🔧 Fix: Integrated `is_private_ip` from `app.utils.network` to block connections resolving to private, loopback, link-local, or reserved IPs. ✅ Verification: Ran `test_imap_tasks.py` and `test_api_imap_accounts.py` successfully. Checked `ruff` output and diffs. Removed all scratch files from the commit. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
46 lines
2.3 KiB
HTML
46 lines
2.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>{{ _("billing.success_page_title") }}</title>
|
|
<link href="https://cdn.jsdelivr.net/npm/tailwindcss@2.2.19/dist/tailwind.min.css" rel="stylesheet">
|
|
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css"
|
|
integrity="sha512-DTOQO9RWCH3ppGqcWaEA1BIZOC6xxalwEsw9c2QQeAIftl+Vegovlnee1c9QX4TctnWMn13TZye+giMm8e2LwA=="
|
|
crossorigin="anonymous" referrerpolicy="no-referrer" />
|
|
</head>
|
|
<body class="bg-gray-100 min-h-screen flex items-center justify-center py-8">
|
|
<main class="bg-white rounded-lg shadow-lg p-8 max-w-md w-full text-center" role="main">
|
|
<div class="flex justify-center mb-6">
|
|
<img src="/static/images/logo_writing.svg" alt="{{ _('auth.logo_alt') }}" class="h-16">
|
|
</div>
|
|
|
|
<div class="flex justify-center mb-4">
|
|
<div class="bg-green-100 rounded-full p-4">
|
|
<i class="fas fa-circle-check text-green-600 text-5xl" aria-hidden="true"></i>
|
|
</div>
|
|
</div>
|
|
|
|
<h1 class="text-2xl font-bold text-gray-800 mb-2">{{ _("billing.success_heading") }}</h1>
|
|
<p class="text-gray-600 mb-8">
|
|
{{ _("billing.success_message") }}
|
|
</p>
|
|
|
|
<div class="space-y-3">
|
|
<a href="/subscription"
|
|
class="block w-full py-3 px-4 rounded-lg border-2 border-indigo-600 text-indigo-600 font-semibold hover:bg-indigo-50 transition focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
|
|
style="min-height:44px;display:flex;align-items:center;justify-content:center;"
|
|
>
|
|
<i class="fas fa-credit-card mr-2" aria-hidden="true"></i>{{ _("billing.manage_subscription") }}
|
|
</a>
|
|
<a href="/upload"
|
|
class="block w-full py-3 px-4 rounded-lg bg-indigo-600 text-white font-semibold hover:bg-indigo-700 transition focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
|
|
style="min-height:44px;display:flex;align-items:center;justify-content:center;"
|
|
>
|
|
<i class="fas fa-arrow-right mr-2" aria-hidden="true"></i>{{ _("billing.go_to_dashboard") }}
|
|
</a>
|
|
</div>
|
|
</main>
|
|
</body>
|
|
</html>
|