readest

akai-tools/readest

Fork 0

forked from akai/readest

Commit Graph

Author	SHA1	Message	Date
Huang Xin	184de9210d	fix(security): prevent SSRF in kosync proxy (CWE-918) (#3793 ) Validate serverUrl in the kosync API proxy to block requests to private/internal addresses and non-http(s) schemes. Also fix isLanAddress to detect 0.0.0.0 and bracket-wrapped IPv6 private addresses. Closes code-scanning alert #14. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-07 21:21:51 +02:00
Huang Xin	0e516f6e56	chore(test): add unit tests and enforce dash-case naming for test files (#3715 ) Add ~290 new unit tests covering utils (lru, diff, css, a11y, walk, usage, txt-worker), services (EdgeTTSClient, transformers), and suppress noisy console output across all test files. Rename 27 camelCase test files to dash-case for consistency. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-01 09:14:00 +02:00

Author

SHA1

Message

Date

Huang Xin

184de9210d

fix(security): prevent SSRF in kosync proxy (CWE-918) (#3793 )

Validate serverUrl in the kosync API proxy to block requests to
private/internal addresses and non-http(s) schemes. Also fix isLanAddress
to detect 0.0.0.0 and bracket-wrapped IPv6 private addresses.

Closes code-scanning alert #14.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 21:21:51 +02:00

Huang Xin

0e516f6e56

chore(test): add unit tests and enforce dash-case naming for test files (#3715 )

Add ~290 new unit tests covering utils (lru, diff, css, a11y, walk,
usage, txt-worker), services (EdgeTTSClient, transformers), and
suppress noisy console output across all test files. Rename 27
camelCase test files to dash-case for consistency.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 09:14:00 +02:00

2 Commits