MHSanaei 534afe13ab fix(sub): treat external subscription providers as untrusted input ...

A client's external subscription is fetched from a third party on every
subscriber refresh, and the fetcher trusted it more than its siblings:
- it dialled any address, redirects included; it now goes through the
  SSRF guard like the outbound subscription and remote routing fetchers;
- it forwarded any line containing "://"; it now keeps only server share
  links, so app deeplinks and plain URLs never reach the subscriber's app;
- it bounded the body but not the link count (now 1000) or the headers
  (now 64 KiB), and stored the raw error, URL included, on every row; the
  stored error is now host-only and at most 1 KiB.

The link parser also refuses links that nest JSON past 16 levels, since
the JSON subscription pretty-prints it at quadratic cost, and external
configs are marshalled compactly until the final, single indent pass.

2026-10-31 08:53:27 +00:00

..

outbound_fuzz_test.go

Test-quality audit: fix 2 prod bugs, strengthen weak tests, add mutation/fuzz/CI tooling (#5345)

2026-06-15 15:17:03 +02:00

outbound_helpers_test.go

feat(sub): export TLS cipher suites as the cs query param in share links (#6825)

2026-10-24 06:44:24 +02:00

outbound_test.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

outbound.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00