Security (high): SSRF through webhook and assistant URLs issue #219 closed: completed andymccall opened this 20 days ago · 0 comments

External review: webhook and repository assistant URLs need only http(s), < 2000 characters, no whitespace; nothing blocks loopback, private, link-local, multicast, IPv6 local or cloud metadata (169.254.169.254) addresses, and redirects are not revalidated. One shared safe-fetch for every outbound integration (webhooks, assistants, model lists, sign-in, mirrors, backups' destinations where given by users): resolve, reject non-public addresses, pin the connection to the checked address (DNS rebinding), revalidate each redirect, cap time and size; egress firewall as a second layer. Local Ollama only through a site-admin allowlist, not a repository setting.