fix(security): align SSRF denylists and reject endpoint userinfo - #8321

Merged

apurvvkumaria merged 9 commits into

mainfrom

codex/pr7764-verified

Aug 5, 2026

Commits on Aug 5, 2026

fix(security): align SSRF denylists and reject endpoint userinfo

Ayush7614
authored and
apurvvkumaria
committed
b32e2e6
test(ssrf): cover username-only and password-only userinfo

Ayush7614
authored and
apurvvkumaria
committed
0161862
fix(security): block Dummy IPv6 Prefix and assert pre-DNS userinfo reject

Ayush7614
authored and
apurvvkumaria
committed
53c31b5
docs(security): document expanded endpoint validation
apurvvkumaria
committed
8cbb092
merge(main): refresh branch for package fixture fix
apurvvkumaria
committed
caa0354
fix(security): redact malformed endpoint URLs
apurvvkumaria
committed
3e07ed1
merge: refresh #8321 from main
cv
committed
2bb6772
merge: refresh #8321 from main
cv
committed
272eda7
merge: refresh #8321 from main
cv
committed
abee3d4