5 Commits

Author	SHA1	Message	Date
hank	9a0aa5a89e	fix: prevent possible dns rebinding for alert notifications directing to internal sevices (#2314) ... - Validate resolved IPs immediately before connecting. - Guard Shoutrrr requests during initialization and delivery. - Require admins for services without HTTP client support. - Test DNS rebinding, redirects, internal hosts, and authorization. - Upgrade Shoutrrr to 0.20.0 to support custom dialcontext	2026-09-08 08:05:47 -04:00
henrygd	d7256c7af7	fix: widen coverage of internal ip space in isInternalIP	2026-08-26 13:42:29 -04:00
henrygd	6f92b9396d	fix(hub): user alerts idor ... fixes very unlikely scenario where user guesses another user's 15 character random system id and adds alerts for it	2026-08-21 17:25:09 -04:00
henrygd	c3dffff5e4	hub: prevent non-admin users from sending test alerts to internal hosts	2026-04-07 16:08:28 -04:00
henrygd	06fdd0e7a8	refactor(hub,alerts): move api functions/tests to alerts_api.go	2026-04-07 14:47:08 -04:00