nullkey 0b64ef9bd1 fix(security): support IPv6 in SSRF validation via whitelist mechanism ...

- Keep strict mode blocking all direct IPs (IPv4 and IPv6 uniformly)
- Unify all SSRF call sites to use ValidateURLForSSRF (whitelist-aware)
- Add Teredo (2001:0000::/32) and 6to4 (2002::/16) tunnel detection
- Make redirect handler and DNS pinning respect SSRF_WHITELIST
- Unexport isSSRFSafeURL to prevent future callers bypassing whitelist
- Add scheme validation for whitelisted redirect targets
- Document IPv6 whitelist syntax in .env.example
- Add comprehensive IPv6 test coverage

2026-03-31 20:45:15 +08:00

..

crypto_test.go

fix(tenant): prevent api_key encryption loss on tenant settings update

2026-03-25 21:25:21 +08:00

crypto.go

feat(security): add AES-256-GCM encryption for API keys at rest

2026-03-09 10:35:07 +08:00

debug.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00

filesize.go

feat: 添加可配置的文件上传大小限制

2025-12-30 14:35:10 +08:00

httputil.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

inject_test.go

feat: add unit tests for InjectAndConditions function

2026-03-16 19:21:35 +08:00

inject.go

feat(database): enhance DatabaseQueryTool with search scope filtering

2026-03-31 10:52:01 +08:00

json.go

feat: Add DataSchema tool for retrieving schema information from CSV and Excel files

2025-12-29 20:03:51 +08:00

log_sanitize.go

feat: implement image upload and multimodal support

2026-03-12 10:32:26 +08:00

security_test.go

fix(security): support IPv6 in SSRF validation via whitelist mechanism

2026-03-31 20:45:15 +08:00

security.go

fix(security): support IPv6 in SSRF validation via whitelist mechanism

2026-03-31 20:45:15 +08:00

taskid.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00