5 Commits

Author	SHA1	Message	Date
henrygd	aefb917a08	fix possible ssrf in test notifications ... - Validate resolved IPs immediately before connecting. - Guard Shoutrrr requests during initialization and delivery. - Require admins for services without HTTP client support. - Test DNS rebinding, redirects, internal hosts, and authorization.	2026-09-06 12:47:40 -04:00
henrygd	d7256c7af7	fix: widen coverage of internal ip space in isInternalIP	2026-08-26 13:42:29 -04:00
henrygd	6f92b9396d	fix(hub): user alerts idor ... fixes very unlikely scenario where user guesses another user's 15 character random system id and adds alerts for it	2026-08-21 17:25:09 -04:00
henrygd	c3dffff5e4	hub: prevent non-admin users from sending test alerts to internal hosts	2026-04-07 16:08:28 -04:00
henrygd	06fdd0e7a8	refactor(hub,alerts): move api functions/tests to alerts_api.go	2026-04-07 14:47:08 -04:00