Commit Graph
9 Commits
Author SHA1 Message Date
ik 39f66481be R11: Validate URL host before network I/O — prevent SSRF
- Add _validate_url_host() to check allowlist before urlopen()
- Validate both original URL and redirect target
- Reject localhost, internal IPs, and non-allowlisted hosts
- Add 2 unit tests for disallowed host rejection
- Prevents SSRF attacks via malicious source URLs
2026-09-10 05:45:57 +07:00
ik 486b4e9645 fix: enforce community cooldown per site 2026-09-08 16:32:42 +07:00
ik 3f468799bd feat: enforce community source cooldown
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-05 07:52:37 +07:00
ik 1a09bd59f3 feat: add RF4MAP and RF4 Posts research parsers
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-05 07:36:35 +07:00
ik b0974d5e4c test: cover weekly official records import 2026-09-03 18:53:10 +07:00
ik fda2e5a7bc refactor: share official records parser 2026-09-03 18:53:03 +07:00
ik 16d64606f8 feat: add RF4DB and RF4-STAT research parsers 2026-09-03 18:37:09 +07:00
ik 17c9c40241 docs: audit data sources and parser contracts 2026-09-03 18:27:22 +07:00
ik a6f91a1329 Complete stage 0 source research 2026-09-02 19:52:32 +07:00