Repository navigation

fix(web): block private hosts in S3 endpoint test and save - #1932

Merged

richiemcilroy merged 4 commits into

mainfrom

security/s3-endpoint-ssrf

Oct 23, 2026

Merged

fix(web): block private hosts in S3 endpoint test and save#1932
richiemcilroy merged 4 commits into
mainfrom
security/s3-endpoint-ssrf

Commits on Jun 19, 2026
- fix(web): block private hosts in S3 endpoint test
  richiemcilroy
  committed
  152954d
- fix(web): harden S3 endpoint SSRF guard (IPv6 ranges, userinfo, DNS rebinding)
  richiemcilroy
  committed
  2573de4
Commits on Oct 23, 2026
- Merge remote-tracking branch 'origin/main' into security/s3-endpoint-ssrf
  richiemcilroy
  committed
  014651e
- fix(web): block private S3 endpoints on Cap Cloud for test and save, including IPv4-mapped IPv6
  richiemcilroy
  committed
  d0f5847