Diego Rodrigues de Sa e Souza 36932b62a7 fix(api): harden private webhook opt-in against cloud-metadata SSRF (#3269) (#3281) ...

Follow-up to the #3269 private-webhook opt-in. With the opt-in on, the private-host
check was bypassed entirely, leaving cloud-metadata endpoints (169.254.169.254,
metadata.google.internal, 100.100.100.200, link-local 169.254.0.0/16) reachable — the
classic SSRF -> IAM-credential pivot — and the webhook test endpoint returned the
upstream body, making it a content-exfiltration primitive against internal services.

- outboundUrlGuard: add isCloudMetadataHost(); parseAndValidateWebhookUrl blocks those
  hosts UNCONDITIONALLY, even when private targets are opted in.
- webhooks/[id]/test: redact responseBody for private targets (status + latency only).

Regression test: tests/unit/webhook-metadata-guard-3269.test.ts (RED before, GREEN after);
existing webhook SSRF/opt-in suites stay green (34/34).

2026-06-06 03:08:16 -03:00

..

outboundUrlGuard.ts

fix(api): harden private webhook opt-in against cloud-metadata SSRF (#3269) (#3281)

2026-06-06 03:08:16 -03:00

remoteImageFetch.ts

feat(network): add guarded remote image fetch utility

2026-04-27 02:25:46 -03:00

safeOutboundFetch.ts

fix: NVIDIA NIM API key validation timeout (bypass proxy fetch patch) (#3226)

2026-06-05 11:52:27 -03:00