Huang Xin 184de9210d fix(security): prevent SSRF in kosync proxy (CWE-918) (#3793) ...

Validate serverUrl in the kosync API proxy to block requests to
private/internal addresses and non-http(s) schemes. Also fix isLanAddress
to detect 0.0.0.0 and bracket-wrapped IPv6 private addresses.

Closes code-scanning alert #14.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-07 21:21:51 +02:00

..

readest-app

fix(security): prevent SSRF in kosync proxy (CWE-918) (#3793)

2026-04-07 21:21:51 +02:00

readest.koplugin

feat(sync): add full sync option for annotations in koplugin, closes #3710 (#3718)

2026-04-01 15:35:48 +02:00