senke 78db1fa684 fix(security): add SSRF protection, real track access validation, and pagination bounds ... - Add IsURLSafe() function to webhook service blocking private IPs, localhost, and cloud metadata endpoints (SSRF protection) - Implement real validate_track_access() in stream server querying DB for track visibility, ownership, and purchase status - Remove dangerous JWT fallback user in chat server that allowed deleted users to maintain access with forged credentials - Add upper limit (100) on pagination in profile, track, and room handlers - Fix Dockerfile.production healthcheck path to /api/v1/health Co-authored-by: Cursor <cursoragent@cursor.com>		2026-02-12 22:44:03 +01:00
..
auth	chore(backend): config, router, auth, stream service, sanitizer, tests	2026-02-11 22:19:09 +01:00
collaboration	adding initial backend API (Go)	2025-12-03 20:29:37 +01:00
education	adding initial backend API (Go)	2025-12-03 20:29:37 +01:00
marketplace	feat: Visual masterpiece - true light mode & premium UI	2026-01-11 02:32:21 +01:00
social	feat: Visual masterpiece - true light mode & premium UI	2026-01-11 02:32:21 +01:00
track	fix(security): add SSRF protection, real track access validation, and pagination bounds	2026-02-12 22:44:03 +01:00