MechaCat02 a0d63ac9fd fix(crawler): guard headless nav against internal SSRF targets on list/detail path ...

`navigate()` (list/detail/pagination) and the session probe called
`Browser::new_page()` without the SSRF check that already guards the
chapter-content path, so a hostile or compromised scraped source could
serve `<a href="http://169.254.169.254/…">` / `http://postgres:5432/` in a
listing and use the in-container Chromium as a read oracle.

Add `guard_navigate_url` (reusing `ensure_public_target`) at the top of
`navigate`, before rate-limiting or opening a page, and apply the same
check to `fetch_probe_html`. Covers base URL, pagination, and detail links.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-03 20:54:45 +02:00

..

e2e

test(e2e): kill cold-start flakiness with an /api/v1 fallback + one retry

2026-07-02 20:06:20 +02:00

src

fix(auth): keep session on a wrong-current-password 401

2026-07-01 20:11:07 +02:00

static

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

.dockerignore

bugfix: third-pass audit follow-ups (F1-F4 + dockerignore)

2026-05-17 00:13:14 +02:00

.gitignore

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

audit.mjs

fix(frontend): mobile layout polish + overflow handling (0.60.1)

2026-06-08 20:58:21 +02:00

Dockerfile

fix(docker): unblock image builds on this host

2026-05-31 17:26:58 +02:00

package-lock.json

fix(jobs): per-lease generation token closes the ack-from-dead-lease race (0.87.26)

2026-06-24 20:05:55 +02:00

package.json

fix(crawler): guard headless nav against internal SSRF targets on list/detail path

2026-07-03 20:54:45 +02:00

playwright.config.ts

test(e2e): kill cold-start flakiness with an /api/v1 fallback + one retry

2026-07-02 20:06:20 +02:00

svelte.config.js

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

tsconfig.json

chore: initial project scaffold

2026-05-16 21:05:16 +02:00

vite.config.ts

feat: paginate list views, fix stale page titles, tidy admin filter bar

2026-06-01 21:18:53 +02:00