Nick Szaunig 79010a926b fix(backend): close two SSRF bypasses in webhook URL validation ...

1. The URL guard only classified IP-literal hostnames; any plain domain
   name (the common case) skipped validation entirely. Hostnames are now
   resolved via DNS and every returned address is checked against the
   same private/loopback/link-local ranges (net.BlockList), so an
   attacker-controlled domain pointed at an internal IP is rejected too.
2. fetch() follows redirects by default, so a registered public URL could
   302 to an internal target at delivery time. Delivery now uses
   redirect: 'manual' so such a redirect is never followed.

2026-08-23 11:08:40 +02:00

ApiCore-Backend

fix(backend): close two SSRF bypasses in webhook URL validation

2026-08-23 11:08:40 +02:00

ApiCore-Frontend

feat(frontend): Statistik-Seite mit animierten Auswertungen (Modul 27)

2026-08-23 06:41:16 +02:00

deploy/k8s

feat(frontend): Login + Benutzerverwaltung (Modul 1)

2026-08-21 08:45:37 +02:00

docs

chore: planning docs + backend/frontend scaffold + MVP Prisma schema

2026-08-21 04:48:16 +02:00

ARCHITECTURE.md

docs(architecture): Backup-/Restore-Strategie dokumentiert (Modul 20)

2026-08-22 09:57:18 +02:00

CLAUDE.md

chore: planning docs + backend/frontend scaffold + MVP Prisma schema

2026-08-21 04:48:16 +02:00

TASKS.md

feat(frontend): Statistik-Seite mit animierten Auswertungen (Modul 27)

2026-08-23 06:41:16 +02:00

S

Description

ApiCore - Imkereidokumentationssoftware

https://apicore.encry.de/

8.4 MiB

0 Stars 1 Watchers 0 Forks

Languages

TypeScript 98.5%

JavaScript 0.8%

Python 0.3%

CSS 0.2%

PLpgSQL 0.1%