security(webhooks): consolidate destination admission and delivery evidence - #670

Draft

seonghobae wants to merge 53 commits into

sentinel-ssrf-webhook-protection-18195847475189352817

Commits on Sep 5, 2026

feat: prevent SSRF by blocking internal IPs in webhooks
seonghobae
committed
c0908f8
test(webhooks): reproduce IPv6 SSRF registration gaps
seonghobae
committed
d1bdf34
test(webhooks): run SSRF address-family regression
seonghobae
committed
030ad21
chore(security): keep local SSRF finding out of repository doctrine
seonghobae
committed
f17a735
test(webhooks): separate IPv6 and HTTPS SSRF boundaries
seonghobae
committed
7d662f3
feat: prevent SSRF by blocking internal IPs in webhooks using undici dispatcher
seonghobae
committed
970ba19
repair(webhooks): restore deterministic SSRF RED boundary
seonghobae
committed
4b23a19
test(webhooks): prove delivery-time SSRF boundary
seonghobae
committed
5440791

Commits on Sep 6, 2026