No description
Find a file
유창욱 62e2d183f8 fix: block SSRF to internal addresses in remote fetchers
Resolve each candidate image/page/stylesheet URL and refuse loopback,
RFC1918, link-local (cloud-metadata), reserved, multicast, and unspecified
targets before fetching; re-validate on every redirect hop via a custom
opener. URLs originate from external search-result content, so this closes
the operator server fetching internal services.
2026-06-20 18:22:10 +09:00
docs chore: pin runtime dependencies for offline air-gapped install 2026-06-20 18:19:08 +09:00
src/rights_filter fix: block SSRF to internal addresses in remote fetchers 2026-06-20 18:22:10 +09:00
tests fix: block SSRF to internal addresses in remote fetchers 2026-06-20 18:22:10 +09:00
web/operator-gui fix: resolve multi-agent review findings for workbench efficiency round 2026-06-12 18:44:35 +09:00
.env.example fix: harden operator HTTP server 2026-06-20 18:18:54 +09:00
.gitignore chore: pin runtime dependencies for offline air-gapped install 2026-06-20 18:19:08 +09:00
package.json chore: initial commit of copyrighter (rights_filter) 2026-06-09 09:50:31 +09:00
requirements-dev.txt chore: pin runtime dependencies for offline air-gapped install 2026-06-20 18:19:08 +09:00
requirements.txt chore: pin runtime dependencies for offline air-gapped install 2026-06-20 18:19:08 +09:00
run_copyrighter_server.py chore: initial commit of copyrighter (rights_filter) 2026-06-09 09:50:31 +09:00