RunFetchRssNode, RunWebhookNode and RunHttpRequestNode guarded the initial URL but then followed redirects unguarded, so a public URL could 302 to an internal address. RSS now fetches through SafeHttpFetcher::get() (re-guards every hop); webhooks no longer follow redirects; the generic HTTP request node re-runs the SSRF guard on each hop via a new SafeHttpFetcher::redirectGuardOptions(). |
||
|---|---|---|
| .. | ||
| RunConditionNode.php | ||
| RunDelayNode.php | ||
| RunEndNode.php | ||
| RunFetchRssNode.php | ||
| RunGenerateNode.php | ||
| RunHttpRequestNode.php | ||
| RunPublishNode.php | ||
| RunWebhookNode.php | ||