Juan Denis a8c5237d32 Refuse internal targets for user-set webhook URLs ...

Event subscriptions, the webhook gateway's forward_url and the
Discord/Slack/generic alert hooks posted to whatever URL a user typed,
from inside the network: the panel's own API on loopback, LAN hosts,
cloud metadata. Subscriptions followed redirects and stored the reply,
and the gateway forward can be triggered without logging in.

safe_http.post refuses non-public addresses, connects to the address it
checked so DNS can't swap it afterwards, never follows redirects and
caps the body it keeps. SERVERKIT_ALLOW_PRIVATE_WEBHOOKS=1 restores
internal targets for operators who need them.

2026-10-10 06:52:32 -04:00

..

__init__.py

feat(queue-bus): introduce ServerKit Queue Bus under Operations

2026-06-20 22:25:06 -04:00

webhook_consumer.py

Refuse internal targets for user-set webhook URLs

2026-10-10 06:52:32 -04:00