trypost/app/Actions/Automation/Node
Paulo Castellano 11d6bddf9c fix(security): guard automation node requests against redirect-SSRF
RunFetchRssNode, RunWebhookNode and RunHttpRequestNode guarded the initial URL but then followed redirects unguarded, so a public URL could 302 to an internal address. RSS now fetches through SafeHttpFetcher::get() (re-guards every hop); webhooks no longer follow redirects; the generic HTTP request node re-runs the SSRF guard on each hop via a new SafeHttpFetcher::redirectGuardOptions().
2026-07-17 14:55:56 -03:00
..
RunConditionNode.php Back fixed-set automation strings with enums and consts 2026-06-13 15:04:24 -03:00
RunDelayNode.php Back fixed-set automation strings with enums and consts 2026-06-13 15:04:24 -03:00
RunEndNode.php feat(automations): implement automation features and UI enhancements 2026-05-24 09:17:19 -03:00
RunFetchRssNode.php fix(security): guard automation node requests against redirect-SSRF 2026-07-17 14:55:56 -03:00
RunGenerateNode.php refactor(linkedin): infer post format from media + unify account connection 2026-06-24 21:05:09 -03:00
RunHttpRequestNode.php fix(security): guard automation node requests against redirect-SSRF 2026-07-17 14:55:56 -03:00
RunPublishNode.php Tighten automation conventions: pagination, imports, i18n, enums 2026-06-13 13:59:52 -03:00
RunWebhookNode.php fix(security): guard automation node requests against redirect-SSRF 2026-07-17 14:55:56 -03:00