| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 2026-08-10 | fix(receiver): prevent requests to non-public addresses | Dennis Fink | |
| Resolve source hostnames before fetching and reject addresses that are not globally routable to prevent SSRF against local or private services. Repeat the check for every HTTP request so redirects cannot bypass the initial source validation. Treat DNS resolution failures during verification as temporary fetch errors. | |||
 |
index : webmentions-ssg | |
| A web service that implements webmentions receiver/sender for static site generators. | Dennis Fink |
| aboutsummaryrefslogtreecommitdiff |