DorianandClaude Opus 4.6 956e98b041 fix(app): add SSRF protection to RSS fetcher ...

Add post-DNS SSRF validation using dns.lookup() to verify resolved IPs
are not in private ranges. Block non-http(s) schemes (file://, ftp://)
in discoverFeedUrl(). Extract isPrivateIp() helper for reuse.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 01:27:08 +00:00

..

app

fix(app): add SSRF protection to RSS fetcher

2026-03-06 01:27:08 +00:00

core

feat(app): video player, guide page, free films, PWA cache fix

2026-03-06 00:56:39 +00:00