Paulo Castellano 11d6bddf9c fix(security): guard automation node requests against redirect-SSRF ... RunFetchRssNode, RunWebhookNode and RunHttpRequestNode guarded the initial URL but then followed redirects unguarded, so a public URL could 302 to an internal address. RSS now fetches through SafeHttpFetcher::get() (re-guards every hop); webhooks no longer follow redirects; the generic HTTP request node re-runs the SSRF guard on each hop via a new SafeHttpFetcher::redirectGuardOptions().		2026-07-17 14:55:56 -03:00
..
Automation	Tidy automation backend: run duration, folded migrations, imports	2026-06-13 16:30:32 -03:00
Node	fix(security): guard automation node requests against redirect-SSRF	2026-07-17 14:55:56 -03:00
Run	Validate webhook payload template is JSON before it can run	2026-06-13 16:03:19 -03:00
Trigger	Denormalize automation trigger_type into an indexed column	2026-06-13 15:26:54 -03:00
TriggerItem	feat(automations): implement automation features and UI enhancements	2026-05-24 09:17:19 -03:00