MichaelandClaude Haiku 4.5 5497c89a99 security: SSRF protection on user-supplied RSS URLs ...

Validate every RSS URL submitted via /api/podcasts/subscribe before
fetching. Rejects non-http(s), localhost, private IPv4/IPv6 ranges,
link-local, and cloud metadata endpoints (169.254.169.254). Resolves
hostnames via DNS and re-checks every returned address.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

2026-04-18 07:25:33 +02:00

..

src

security: SSRF protection on user-supplied RSS URLs

2026-04-18 07:25:33 +02:00

eslint.config.mjs

Migre eslint v8 → v9 (flat config), supprime les dépréciations

2026-04-16 11:27:46 +02:00

package.json

feat: initialize backend project with dependencies and build scripts

2026-04-16 14:50:12 +02:00

tsconfig.json

fix: switch backend to CommonJS to fix ESM module resolution

2026-04-16 11:01:48 +02:00