유창욱 62e2d183f8 fix: block SSRF to internal addresses in remote fetchers ... Resolve each candidate image/page/stylesheet URL and refuse loopback, RFC1918, link-local (cloud-metadata), reserved, multicast, and unspecified targets before fetching; re-validate on every redirect hop via a custom opener. URLs originate from external search-result content, so this closes the operator server fetching internal services.		2026-06-20 18:22:10 +09:00
..
operator_gui	fix: resolve multi-agent review findings for workbench efficiency round	2026-06-12 18:44:35 +09:00
rights_filter	fix: block SSRF to internal addresses in remote fetchers	2026-06-20 18:22:10 +09:00