3 commits

Author	SHA1	Message	Date
senke	2ed2bb9dcf	v0.9.4	2026-03-05 23:03:43 +01:00
senke	f14574322c	fix(security): add SSRF protection for webhook URL registration ... SEC-07: Strengthened ValidateWebhookURL to require HTTPS only (was allowing HTTP). Private IP ranges, localhost, and cloud metadata endpoints remain blocked.	2026-02-22 17:31:10 +01:00
senke	ed7c4b4402	security(webhooks): extract SSRF validation to internal/validators/url_validator	2026-02-14 18:24:39 +01:00