Nick Szaunig a0f7573af5 fix(backend): block SSRF via webhook subscription URLs ...

WebhooksService.create() rejected obviously private, loopback, or
link-local URLs (incl. cloud metadata 169.254.169.254 and the
decimal/octal/hex IPv4 shorthand encodings the WHATWG URL parser
normalizes) so an admin-configured webhook can no longer be used to
proxy requests into internal infrastructure. Registration-time only,
no DNS resolution (DNS-rebinding is out of scope for this check).

2026-08-23 07:05:53 +02:00

..

utils

fix(backend): Refresh-Token als httpOnly-Cookie statt Response-Body

2026-08-21 08:27:58 +02:00

apiaries.e2e-spec.ts

feat(backend): Bienenstaende-Modul (Modul 2)

2026-08-21 08:50:50 +02:00

audit-log.e2e-spec.ts

feat(backend): Audit-Log-Abfrage (Modul 19)

2026-08-22 06:00:52 +02:00

auth.e2e-spec.ts

fix(backend): Refresh-Token als httpOnly-Cookie statt Response-Body

2026-08-21 08:27:58 +02:00

bottling.e2e-spec.ts

feat(backend): Abfuellungen und Produkte (Modul 23)

2026-08-22 11:08:09 +02:00

calendar.e2e-spec.ts

feat(backend): Kalender (Modul 25)

2026-08-22 22:34:47 +02:00

colonies.e2e-spec.ts

fix(backend): Status-Guard fuer Move/Split/Merge auf inaktiven Voelkern

2026-08-21 18:20:48 +02:00

dashboard.e2e-spec.ts

feat(backend): Dashboard-Modul (Modul 13)

2026-08-22 05:15:25 +02:00

equipment.e2e-spec.ts

feat(backend): Inventar (Modul 24)

2026-08-22 22:26:16 +02:00

export.e2e-spec.ts

feat(backend): Datenexport-Modul (Modul 21)

2026-08-22 10:05:46 +02:00

extractions.e2e-spec.ts

feat(backend): Ernten- und Schleuderungs-Module (Modul 10)

2026-08-22 00:25:36 +02:00

feedings.e2e-spec.ts

feat(backend): Fütterungen-Modul (Modul 9)

2026-08-22 00:14:41 +02:00

harvests.e2e-spec.ts

feat(backend): Ernten- und Schleuderungs-Module (Modul 10)

2026-08-22 00:25:36 +02:00

health.e2e-spec.ts

feat(backend): Auth/Users/Audit-Modul (Modul 1)

2026-08-21 08:22:16 +02:00

honey-batches.e2e-spec.ts

feat(backend): Honigchargen-Modul (Modul 11)

2026-08-22 00:37:09 +02:00

inspections.e2e-spec.ts

feat(backend): Durchsichten-Modul (Modul 5)

2026-08-21 18:43:08 +02:00

jest-e2e.json

feat(backend): Audit-Log-Abfrage (Modul 19)

2026-08-22 06:00:52 +02:00

notifications.e2e-spec.ts

fix(backend): IDOR in POST /notifications/:id/read (Modul 26)

2026-08-22 22:50:00 +02:00

products.e2e-spec.ts

feat(backend): Abfuellungen und Produkte (Modul 23)

2026-08-22 11:08:09 +02:00

qr.e2e-spec.ts

feat(backend): QR-Code-System (Modul 22)

2026-08-22 10:51:42 +02:00

queens.e2e-spec.ts

feat(backend): Koeniginnenbewertung (Modul 31)

2026-08-22 22:55:36 +02:00

search.e2e-spec.ts

feat(backend): Suche und Filter (Modul 14)

2026-08-22 05:29:47 +02:00

setup-env.ts

feat(backend): Auth/Users/Audit-Modul (Modul 1)

2026-08-21 08:22:16 +02:00

statistics.e2e-spec.ts

feat(backend): Statistik- und Reporting-Endpunkte (Modul 27)

2026-08-23 06:33:50 +02:00

storage.e2e-spec.ts

feat(backend): Lagerverwaltung-Modul (Modul 12)

2026-08-22 05:03:48 +02:00

tasks.e2e-spec.ts

feat(backend): Aufgaben-Modul (Modul 6)

2026-08-21 23:43:47 +02:00

treatments.e2e-spec.ts

feat(backend): Behandlungen-Modul (Modul 8)

2026-08-22 00:04:50 +02:00

users.e2e-spec.ts

feat(backend): Auth/Users/Audit-Modul (Modul 1)

2026-08-21 08:22:16 +02:00

varroa.e2e-spec.ts

feat(backend): Varroamessungen-Modul (Modul 7)

2026-08-21 23:56:06 +02:00

webhooks.e2e-spec.ts

fix(backend): block SSRF via webhook subscription URLs

2026-08-23 07:05:53 +02:00