root afc20712cb feat(api): capture POST + upload + SSRF-safe URL fetch ...

safe_fetch.js validates URLs before fetch: rejects non-http(s), literal
or DNS-resolved loopback / RFC1918 / link-local / CGNAT / metadata
addresses; follows redirects manually with the same checks on each hop.
Test fixtures gate the check with VOID_INGEST_ALLOW_PRIVATE for offline
fixtures that hit 127.0.0.1.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-01 03:42:54 +10:00

..

agents.js

feat(api): agents routes + token mgmt (owner-only)

2026-05-31 21:05:42 +10:00

audit.js

feat(api): pending-changes + audit routes

2026-06-01 02:01:10 +10:00

capture.js

feat(api): capture POST + upload + SSRF-safe URL fetch

2026-06-01 03:42:54 +10:00

conversations.js

feat(api): conversations + messages routes

2026-05-31 21:07:36 +10:00

jobs.js

feat(api): jobs routes (list/get/retry/delete, owner-only)

2026-06-01 03:29:52 +10:00

links.js

feat(api): links routes

2026-06-01 01:50:50 +10:00

messages.js

feat(api): conversations + messages routes

2026-05-31 21:07:36 +10:00

pages.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

pending_changes.js

feat(api): pending-changes + audit routes

2026-06-01 02:01:10 +10:00

projects.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

refs.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

resources.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

search.js

feat(api): unified FTS search

2026-06-01 02:04:57 +10:00

source_docs.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00

spaces.js

feat(api): spaces routes

2026-05-31 16:38:23 +10:00

tags.js

feat(api): tags routes

2026-06-01 01:46:43 +10:00

tasks.js

feat(api): capability enforcement on writes

2026-05-31 21:03:52 +10:00