Security: fix SSRF in POST /api/imports — validate VideoUrl against YouTube allowlist#178

Open

davidortinau wants to merge 4 commits into

mainfrom

op-fix-ssrf-video-url-validation

Commits on Apr 24, 2026

.squad: Merge decision inbox + append migration critical rule

davidortinau
and
Copilot
committed
Scribe: Data Import Architecture Planning Session

davidortinau
and
Copilot
committed
Scribe: Captain's final rulings on data import

davidortinau
and
Copilot
committed

Commits on Apr 27, 2026

Fix SSRF vulnerability: validate VideoUrl against YouTube allowlist in POST /api/imports

davidortinau
and
Copilot
committed