Marc-André BombeckandClaude Opus 4.8 38ef581e7a test(security): inventory guard for the SSRF requirePublicHost pins ...

Source-grep guard asserting the openai/anthropic/geo outbound sites keep
the unconditional DNS-rebinding pin and the local AI client keeps its
conditional LAN escape hatch — so a future edit can't silently re-open
the SSRF surface.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-04 12:23:43 +02:00

..

achievements-no-insults.test.ts

i18n(achievements): replace insulting badge titles

2026-05-10 13:32:19 +02:00

api-handler-safe-request-prop.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

api-response-safe-json.test.ts

feat(api): cap request-body size on batch and export ingest routes

2026-06-03 08:56:19 +02:00

api-response-zod.test.ts

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

avatar.test.ts

feat(avatar): self-hosted avatar storage replacing the Gravatar leak

2026-05-28 22:39:20 +02:00

crypto.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

dashboard-layout.test.ts

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

db-to-json.test.ts

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00

db.test.ts

chore(release): v1.4.40 — comprehensive Critical+High architecture closure plus iOS PB30 enablement

2026-05-21 12:48:02 +02:00

doctor-report-data.test.ts

feat(fhir): raise the MedicationAdministration cap to 5000 and make it configurable

2026-06-02 22:22:50 +02:00

doctor-report-pdf-core.test.ts

fix(report): keep modules together, label the chart time axis, fix glyph stretch

2026-05-31 22:47:44 +02:00

export.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

format-active-locale.test.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

format-date-or-relative.test.ts

fix(i18n): formatDateOrRelative dispatches to One/Other plural keys (v1.4.49.2)

2026-05-23 13:53:04 +02:00

format-locale.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

geo-asn.test.ts

chore(release): v1.4.27

2026-05-15 22:59:10 +02:00

geo-offline-detection.test.ts

chore(release): v1.4.27

2026-05-15 22:59:10 +02:00

geo.test.ts

chore: voice + filename hygiene + wave-4 state wrap

2026-05-10 21:46:32 +02:00

get-client-ip.test.ts

chore(release): v1.4.38

2026-05-17 19:07:03 +02:00

glucose.test.ts

fix(targets): convert glucose targets back to mg/dL on save

2026-06-02 17:01:14 +02:00

i18n-locale-integrity.test.ts

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

idempotency.test.ts

fix(idempotency): scrub hls_ share-link tokens from cached bodies

2026-06-04 02:34:33 +02:00

measurement-type-enum-coverage.test.ts

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

medical-citations.test.ts

v1.4 medical-safety: protect against silent DBP hypotension, align BP & step citations, ACE body-fat consolidation (#123)

2026-05-08 12:07:46 +02:00

medication-schedule.test.ts

chore(release): v1.4.39.4 — dashboard symmetry for daily-schedule intake projection

2026-05-21 11:20:24 +02:00

moodlog-secret.test.ts

fix(auth): reject moodLog webhook secrets that fail envelope decryption

2026-05-27 00:08:56 +02:00

motion.test.ts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

passkey-errors.test.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

process-type.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.test.ts

refactor(targets): retire the standalone Targets page

2026-06-02 17:01:14 +02:00

rate-limit-auth-surface.test.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

require-auth-bearer.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

safe-fetch-dispatcher.test.ts

feat(security): pin resolved IP on outbound fetches to defeat DNS rebinding

2026-05-28 22:32:11 +02:00

safe-fetch.test.ts

feat(security): safeFetch wrapper with manual redirect and timeout defaults

2026-05-28 22:32:11 +02:00

server-translator.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

ssrf-pin-inventory.test.ts

test(security): inventory guard for the SSRF requirePublicHost pins

2026-06-04 12:23:43 +02:00

time-window-format.test.ts

style: prettier on touched test + e2e files

2026-05-10 13:58:30 +02:00