Paulo Castellano 4a08913d70 fix(security): make SSRF private-network block configurable and guard the last user-URL fetches ... Add config('trypost.security.allow_private_network') (env TRYPOST_ALLOW_PRIVATE_NETWORK, default off) so self-hosted operators can reach their own internal network; only the private-IP rejection is bypassed, scheme/host checks always apply. Add SafeHttpFetcher::guardedRequest() and route the last unguarded user-supplied-URL fetches through it: the Unsplash/Giphy asset import, the API/MCP attach-media-from-URL download, and the OAuth avatar download. Our-own-storage reads (media crop, Bluesky media) are intentionally left unguarded so internal storage keeps working when self-hosted.		2026-07-17 15:40:15 -03:00
..
ai-credits.php	feat: AI image generation pipeline and post creation overhaul	2026-05-08 13:38:30 -03:00
ai.php	refactor(mcp): move upload config from trypost.mcp to ai.mcp	2026-05-15 16:25:26 -03:00
app.php	Make webhook host configurable via WEBHOOK_URL (sendkit-style domain group)	2026-06-14 09:31:00 -03:00
auth.php	feat: migrate custom API token implementation to Laravel Passport for authentication and token management	2026-05-03 18:38:17 -03:00
broadcasting.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
cache.php	fix: cast cached post count to int and align local cache default to redis	2026-05-07 14:31:07 -03:00
cashier.php	Charge $1 for the first month instead of a free trial at checkout	2026-07-09 15:18:00 -03:00
chunk-upload.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
cors.php	refactor: standardize MCP tool responses using API resources and enforce strict structural validation in feature tests	2026-05-03 21:34:20 -03:00
database.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
filesystems.php	feat(storage): DigitalOcean Spaces disk + env documentation	2026-05-19 12:38:29 -03:00
horizon.php	feat(automations): implement automation features and UI enhancements	2026-05-24 09:17:19 -03:00
inertia.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
languages.php	Add UI localization infrastructure and RTL support for 12 new locales	2026-07-03 15:38:40 -03:00
logging.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
mail.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
passport.php	feat: add Passport configuration file with default authentication settings	2026-05-03 20:06:13 -03:00
queue.php	fix: overhaul social publishing — validation, uploads, token refresh	2026-03-31 19:25:19 -03:00
reverb.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
services.php	refactor(linkedin): infer post format from media + unify account connection	2026-06-24 21:05:09 -03:00
session.php	fix: increase OAuth callback close delay to 5s	2026-04-01 14:55:45 -03:00
telescope.php	refactor: settings redesign, Spanish translations, language system, strict_types	2026-03-30 00:20:43 -03:00
trypost.php	fix(security): make SSRF private-network block configurable and guard the last user-URL fetches	2026-07-17 15:40:15 -03:00