1 commit

Author	SHA1	Message	Date
Sirius DevOps	59974be696	fix(api): SSRF guard on ingest; whitelist PATCH /api/sources ... Reject private/loopback/link-local hosts on POST /api/ingest/rss and URL-shaped GDELT queries via camera_scraper.is_public_url (HTTP 400). PATCH /api/sources/{id} only accepts name, url, config, enabled (422 else).	2026-09-01 00:47:15 -04:00