QT/sure
1
0
Fork 0
mirror of https://github.com/we-promise/sure.git synced 2026-05-25 13:34:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
fdffcd0dfdba7f8e53b0bc44064951fa3d267c25
sure/app/models/lunchflow_item.rb
Juan José Mata 73b6077ac3 Constrain Lunchflow base URL to trusted endpoint (#1768) 
* Constrain Lunchflow base URL to trusted endpoint

Prevent SSRF by ignoring user-provided Lunchflow base_url values unless they match the canonical Lunchflow HTTPS endpoint. Add model tests covering invalid host/scheme and valid canonicalization behavior.

* Linter
2026-05-12 12:18:17 +02:00

5.3 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink