Marc-André BombeckandClaude Opus 4.8 bd61374351 fix(security): pin DNS-rebinding check on user/operator outbound hosts ...

Add requirePublicHost to the three outbound safeFetch sites whose host is
user- or operator-controlled and lacked the connect-time pin: the OpenAI
and Anthropic clients (BYO base-URL override) and the IP-geo lookup
(IP_GEO_LOOKUP_URL env). A base URL resolving to a private/metadata
address is now rejected. The LOCAL AI client intentionally stays
conditional (LAN escape hatch). Redirect-follow is already closed by the
safeFetch defaults.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-04 12:20:23 +02:00

..

__tests__

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00

app

feat(coach): facts management routes (list + forget)

2026-06-04 10:29:18 +02:00

components

feat(coach): settings UI to review and forget what the Coach remembers

2026-06-04 12:16:26 +02:00

hooks

feat(insights): unify the derived-metric query hook onto one factory key

2026-06-02 23:13:26 +02:00

lib

fix(security): pin DNS-rebinding check on user/operator outbound hosts

2026-06-04 12:20:23 +02:00

types

chore(release): v1.4.41 — iOS perf hotfix, soft-delete completeness, tree hygiene

2026-05-21 18:36:17 +02:00

instrumentation.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

proxy.ts

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00