sirius/osint-dashboard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(api): SSRF guard on ingest; whitelist PATCH /api/sources #46

Merged
sirius merged 2 commits from feat/ssrf-ingest-source-whitelist into master 2026-09-01 00:54:14 -04:00
Conversation 0 Commits 2 Files changed 3 +103 -11

2 commits

Author SHA1 Message Date
sirius
622c548792 Merge branch 'master' into feat/ssrf-ingest-source-whitelist 2026-09-01 00:54:05 -04:00
Sirius DevOps
59974be696 fix(api): SSRF guard on ingest; whitelist PATCH /api/sources 
Reject private/loopback/link-local hosts on POST /api/ingest/rss and
URL-shaped GDELT queries via camera_scraper.is_public_url (HTTP 400).
PATCH /api/sources/{id} only accepts name, url, config, enabled (422 else).
 2026-09-01 00:47:15 -04:00