google-labs-jules[bot] 5b41d32f90 🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in webhooks ...

Adds validation to webhook URLs before attempting to deliver them to prevent
SSRF attacks targeting private IP ranges, local host, and cloud metadata endpoints.
Validates URL schema, hostname, and applies `is_private_ip()`. Also resolved ruff linting
errors. Tests have been expanded to ensure validation covers all cases.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-05-17 15:04:09 +00:00

..

config_validator

merge: resolve conflicts with main branch (keep both SharePoint + iCloud integrations)

2026-03-16 22:25:51 +00:00

__init__.py

feat(storage): implement immutable original/processed file storage and collision handling

2026-02-11 20:10:19 +00:00

ai_provider.py

feat(ai): handle temperature incompatibility for gpt-5 and o-series models, add model picker UI

2026-02-23 22:12:08 +00:00

allowed_types.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

audit_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

automation_hooks.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

cache.py

fix: add type: ignore for redis.scan() mypy false positive in cache.py

2026-03-01 15:22:50 +00:00

classification_rules.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

compliance_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

config_loader.py

fix(config): decrypt sensitive settings when loading from database

2026-02-23 12:54:34 +00:00

db_migrate.py

🔒 Fix potential SQL injection in database migration preview

2026-03-23 14:06:18 +00:00

db_wizard.py

feat(database): integrate wizard into settings page, improve accessibility and test coverage

2026-03-06 10:02:04 +00:00

encryption.py

feat: add strict mypy type-checking for app/utils/ module

2026-02-14 00:27:52 +00:00

env_utils.py

fix: merge main, resolve conflicts, address review feedback

2026-03-23 16:29:46 +00:00

file_operations.py

🛡️ Sentinel: [CRITICAL] Fix path traversal vulnerability in file utilities

2026-03-23 15:53:18 +00:00

file_queries.py

fix(status): prevent false Completed status when mandatory pipeline steps have not run

2026-02-27 00:51:14 +00:00

file_splitting.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

file_status.py

perf(db): add indexes on query-hot columns and Redis caching layer

2026-03-01 14:38:28 +00:00

filename_utils.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

i18n.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

input_validation.py

fix(api): return 200 with value=None for unknown setting keys in GET endpoint

2026-02-22 20:04:57 +00:00

local_auth.py

feat(auth): add comprehensive debug logging for local login failures

2026-03-08 12:48:38 +00:00

logging.py

fix: include exc_info in log_task_progress debug message

2026-02-17 11:41:56 +00:00

meilisearch_client.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

migrate_logs_to_steps.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

network.py

fix: improve join_url - use walrus op, remove posixpath.normpath

2026-03-23 16:20:56 +00:00

notification.py

feat(notifications): admin push notifications and webhooks for user signup, plan changes, and payment issues

2026-03-07 20:15:39 +00:00

oauth_helper.py

style: fix all flake8 linter errors across app/ directory

2026-02-08 17:42:33 +00:00

ocr_language_manager.py

fix(ocr): ensure Tesseract language data for embed_text_layer regardless of active OCR provider

2026-02-24 18:02:19 +00:00

ocr_provider.py

feat(ocr): add multi-language OCR support with per-pipeline language override

2026-03-08 21:47:12 +00:00

push_notification.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

routing_engine.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

sentry.py

feat(observability): add Sentry error and performance monitoring integration

2026-03-08 21:09:17 +00:00

session_manager.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

settings_service.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

settings_sync.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

setup_wizard.py

feat: update all OpenAI/ChatGPT refs + settings dropdown for fixed-value fields

2026-02-23 20:06:57 +00:00

similarity.py

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

step_manager.py

fix(similarity): truncate text to fit embedding model context window, fix step tracking

2026-03-02 13:27:34 +00:00

step_timeout.py

fix: apply Phase 1-2 correctness and constant extraction from PR #273

2026-02-13 11:25:30 +00:00

subscription.py

chore: merge main into branch, resolve conflict in models.py

2026-03-07 20:53:42 +00:00

suggestion_providers.py

fix: address code review — use modern type hints and Callable annotation

2026-03-05 22:03:30 +00:00

system_reset.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

text_quality.py

feat(ocr): fine-tune OCR quality criteria with stricter threshold and head-to-head comparison

2026-02-25 13:03:21 +00:00

user_notification.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in webhooks

2026-05-17 15:04:09 +00:00

user_scope.py

fix: restore all code deleted/truncated by d2217531 Jules SSRF commit

2026-03-23 23:52:39 +00:00

webhook.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in webhooks

2026-05-17 15:04:09 +00:00