golem15/sm-golem-plugin
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8 Commits 1 Branch 1 Tag
master
Commit Graph

1 Commits

Author SHA1 Message Date
Jakub Zych
da9fcde725 feat: security.AssertSafeURL ports the SSRFGuard 
https only, the golem15.golem.ssrf.allowed_hosts allowlist (overridden by
GOLEM15_SSRF_ALLOWED_HOSTS) with dotted-suffix entries, and a resolve-time
check that every address is public, judged by fetchguard.IsPrivateAddr.
Failures carry PHP's RuntimeException messages.
 2026-10-03 23:09:02 +02:00