RunFetchRssNode, RunWebhookNode and RunHttpRequestNode guarded the initial URL but then followed redirects unguarded, so a public URL could 302 to an internal address. RSS now fetches through SafeHttpFetcher::get() (re-guards every hop); webhooks no longer follow redirects; the generic HTTP request node re-runs the SSRF guard on each hop via a new SafeHttpFetcher::redirectGuardOptions(). |
||
|---|---|---|
| .. | ||
| ConditionNodeTest.php | ||
| DelayNodeTest.php | ||
| EndNodeTest.php | ||
| FetchRssNodeTest.php | ||
| GenerateNodeTest.php | ||
| HttpRequestNodeTest.php | ||
| PublishNodeTest.php | ||
| WebhookNodeTest.php | ||