3 Commits

Author	SHA1	Message	Date
Huang Xin	184de9210d	fix(security): prevent SSRF in kosync proxy (CWE-918) (#3793) ... Validate serverUrl in the kosync API proxy to block requests to private/internal addresses and non-http(s) schemes. Also fix isLanAddress to detect 0.0.0.0 and bracket-wrapped IPv6 private addresses. Closes code-scanning alert #14. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-07 21:21:51 +02:00
Huang Xin	b151b70cb9	fix: don't proxy network connection from Tailscale IP addresses, closes #1834 (#1835)	2025-08-19 05:02:29 +02:00
Huang Xin	079aeaedb0	fix(sync): support custom koreader sync server hosted in LAN, closes #1800 (#1830)	2025-08-18 17:35:49 +02:00