QT/sure
1
0
Fork 0
mirror of https://github.com/we-promise/sure.git synced 2026-05-25 13:34:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
2a0fcd4faead9e2dc9adf19dfc5face5cea7f7b3
sure/test/models/lunchflow_item_test.rb
Juan José Mata 73b6077ac3 Constrain Lunchflow base URL to trusted endpoint (#1768) 
* Constrain Lunchflow base URL to trusted endpoint

Prevent SSRF by ignoring user-provided Lunchflow base_url values unless they match the canonical Lunchflow HTTPS endpoint. Add model tests covering invalid host/scheme and valid canonicalization behavior.

* Linter
2026-05-12 12:18:17 +02:00

1.0 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink