Marc-André Bombeck ea95826415 feat(ai): make the local-host SSRF escape hatch a host allowlist ...

`ALLOW_LOCAL_AI_PRIVATE_HOSTS` was a binary flag that, when `true`,
opened every private/internal host at once — including the cloud
metadata endpoint and any internal panel. Replace the binary check at
all three sites (write-time validation, local client, test resolver)
with a shared `isLocalAiHostAllowed` helper: a comma-separated host list
permits only those exact hostnames, while the legacy `true` still
permits any private host for backward compatibility. The safeFetch /
isPublicUrl floor is untouched; the allowlist only widens what the
operator deliberately permits. Docs and the SSRF-pin inventory test are
updated accordingly.

2026-06-19 21:20:01 +02:00

..

ai-providers.md

feat(ai): make the local-host SSRF escape hatch a host allowlist

2026-06-19 21:20:01 +02:00

apple-health.md

docs(import): document the data-import paths, point Apple Health import at the new settings area

2026-06-07 00:07:58 +02:00

data-import.md

docs(import): document the data-import paths, point Apple Health import at the new settings area

2026-06-07 00:07:58 +02:00

google-health.md

docs(integrations): pin exact WHOOP scopes + webhook URL, add Google Health setup

2026-06-05 12:43:09 +02:00

whoop.md

docs(integrations): pin exact WHOOP scopes + webhook URL, add Google Health setup

2026-06-05 12:43:09 +02:00

withings.md

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00