google-labs-jules[bot] 8b4280d5dd 🛡️ Sentinel: [HIGH] Fix SSRF bypass on DNS resolution failure ...

Modified `is_private_ip` in `app/utils/network.py` to fail securely by returning True (blocking the request) when a hostname cannot be resolved. The previous implementation failed open, creating a risk for Server-Side Request Forgery (SSRF) and DNS rebinding attacks.

Updated corresponding tests to expect the secure behavior.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-23 13:42:14 +00:00

..

config_validator

merge: resolve conflicts with main branch (keep both SharePoint + iCloud integrations)

2026-03-16 22:25:51 +00:00

__init__.py

feat(storage): implement immutable original/processed file storage and collision handling

2026-02-11 20:10:19 +00:00

ai_provider.py

feat(ai): handle temperature incompatibility for gpt-5 and o-series models, add model picker UI

2026-02-23 22:12:08 +00:00

allowed_types.py

feat(mobile): add pre-login legal pages, multi-image selection, file detail view, search, i18n, HEIC support

2026-03-19 19:11:44 +00:00

audit_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

automation_hooks.py

feat(automation): add Zapier and Make.com integration

2026-03-09 23:50:12 +00:00

cache.py

fix: add type: ignore for redis.scan() mypy false positive in cache.py

2026-03-01 15:22:50 +00:00

classification_rules.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

compliance_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

config_loader.py

fix(config): decrypt sensitive settings when loading from database

2026-02-23 12:54:34 +00:00

db_migrate.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

db_wizard.py

feat(database): integrate wizard into settings page, improve accessibility and test coverage

2026-03-06 10:02:04 +00:00

encryption.py

feat: add strict mypy type-checking for app/utils/ module

2026-02-14 00:27:52 +00:00

env_utils.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

file_operations.py

feat: add strict mypy type-checking for app/utils/ module

2026-02-14 00:27:52 +00:00

file_queries.py

fix(status): prevent false Completed status when mandatory pipeline steps have not run

2026-02-27 00:51:14 +00:00

file_splitting.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

file_status.py

perf(db): add indexes on query-hot columns and Redis caching layer

2026-03-01 14:38:28 +00:00

filename_utils.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

i18n.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

input_validation.py

fix(api): return 200 with value=None for unknown setting keys in GET endpoint

2026-02-22 20:04:57 +00:00

local_auth.py

feat(auth): add comprehensive debug logging for local login failures

2026-03-08 12:48:38 +00:00

logging.py

fix: include exc_info in log_task_progress debug message

2026-02-17 11:41:56 +00:00

meilisearch_client.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

migrate_logs_to_steps.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

network.py

🛡️ Sentinel: [HIGH] Fix SSRF bypass on DNS resolution failure

2026-03-23 13:42:14 +00:00

notification.py

feat(notifications): admin push notifications and webhooks for user signup, plan changes, and payment issues

2026-03-07 20:15:39 +00:00

oauth_helper.py

style: fix all flake8 linter errors across app/ directory

2026-02-08 17:42:33 +00:00

ocr_language_manager.py

fix(ocr): ensure Tesseract language data for embed_text_layer regardless of active OCR provider

2026-02-24 18:02:19 +00:00

ocr_provider.py

feat(ocr): add multi-language OCR support with per-pipeline language override

2026-03-08 21:47:12 +00:00

push_notification.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

routing_engine.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

sentry.py

feat(observability): add Sentry error and performance monitoring integration

2026-03-08 21:09:17 +00:00

session_manager.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

settings_service.py

fix(admin): fix greyed-out QR login toggle on admin connections page

2026-03-22 16:06:55 +00:00

settings_sync.py

fix: social login providers now work from DB config without restart

2026-03-22 18:42:18 +00:00

setup_wizard.py

feat: update all OpenAI/ChatGPT refs + settings dropdown for fixed-value fields

2026-02-23 20:06:57 +00:00

similarity.py

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

step_manager.py

fix(similarity): truncate text to fit embedding model context window, fix step tracking

2026-03-02 13:27:34 +00:00

step_timeout.py

fix: apply Phase 1-2 correctness and constant extraction from PR #273

2026-02-13 11:25:30 +00:00

subscription.py

chore: merge main into branch, resolve conflict in models.py

2026-03-07 20:53:42 +00:00

suggestion_providers.py

fix: address code review — use modern type hints and Callable annotation

2026-03-05 22:03:30 +00:00

system_reset.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

text_quality.py

feat(ocr): fine-tune OCR quality criteria with stricter threshold and head-to-head comparison

2026-02-25 13:03:21 +00:00

user_notification.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

user_scope.py

feat(sharing): add file sharing and role-based access management

2026-03-22 14:14:50 +00:00

webhook.py

feat(automation): add Zapier and Make.com integration

2026-03-09 23:50:12 +00:00