🛡️ Sentinel: [HIGH] Fix SSRF in web E2E readiness probe - #1342

Closed

seonghobae wants to merge 7 commits into

mainfrom

sentinel/fix-ssrf-sandboxed-web-e2e-14288601847491184394

Commits on Aug 25, 2026

🛡️ [HIGH] Fix SSRF vulnerability in web e2e readiness probe\n\nScripts/ci/sandboxed_web_e2e.py 의 wait_for_url 함수가 외부/내부 네트워크를 스캔할 수 있는 SSRF 취약점을 방지하기 위해 로컬 호스트만 허용하도록 urllib.parse 검증 로직을 추가했습니다.
seonghobae
committed
9912779
Merge branch 'main' into sentinel/fix-ssrf-sandboxed-web-e2e-14288601847491184394
seonghobae
authored
d723610
Merge branch 'main' into sentinel/fix-ssrf-sandboxed-web-e2e-14288601847491184394
seonghobae
authored
bf888fb
fix(security): require OS isolation for web e2e commands
seonghobae
committed
6182074
fix(security): harden loopback and document isolation
seonghobae
committed
92e3499
fix(security): mount isolated root filesystem
seonghobae
committed
0a297c9
🛡️ [HIGH] Fix SSRF vulnerability in web e2e readiness probe\n\nScripts/ci/sandboxed_web_e2e.py 의 wait_for_url 함수가 외부/내부 네트워크를 스캔할 수 있는 SSRF 취약점을 방지하기 위해 로컬 호스트만 허용하도록 urllib.parse 검증 로직을 추가했습니다.
seonghobae
committed
799b13f