MrMasterbay 4a702cd742 security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido) ...

- push.py _is_internal_or_metadata_host (#469089273): stopped splitting the host on
  ':' (which mangled every IPv6 literal, '::1' -> '', bypassing the block) and unwrap
  IPv4-mapped IPv6 (::ffff:a.b.c.d) so metadata/private checks apply. +6 unit tests.
- docker.yml + release-images.yml (#348463387/#348463388): persist-credentials:false on
  the actions/checkout steps that never push.

2026-08-10 08:36:27 +02:00

..

ISSUE_TEMPLATE

Update bug_report.md

2026-03-19 17:39:07 +01:00

workflows

security: fix web-push IPv6 SSRF bypass + persist-credentials on CI checkouts (Aikido)

2026-08-10 08:36:27 +02:00

FUNDING.yml

Create FUNDING.yml

2026-04-14 23:46:03 +02:00