ayrisdevandClaude Opus 4.8 782226674a Security: harden SSRF guard on stream proxies, fix vtt-proxy allowlist ...

Resolve hosts to IPs and reject private/reserved/link-local ranges (incl.
169.254 cloud metadata) instead of matching hostname text, and re-validate
every redirect hop by following them manually. Restrict curl to http(s).
vtt-proxy allowlist now requires an exact host or a real subdomain.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-15 13:12:44 +03:00

..

api.php

Initial commit: Animexe Laravel platform

2026-07-14 00:01:48 +03:00

console.php

Initial commit: Animexe Laravel platform

2026-07-14 00:01:48 +03:00

web.php

Security: harden SSRF guard on stream proxies, fix vtt-proxy allowlist

2026-07-15 13:12:44 +03:00