4 Commits

Author	SHA1	Message	Date
David Nguyen	8671f269e8	fix: lint project (#2693)	2026-05-08 16:04:22 +10:00
Ephraim Duncan	e5da5bca38	fix: unwrap webhook payload before test and resend (#2710)	2026-04-22 15:42:16 +10:00
Lucas Smith	6b1b1d0417	fix: improve webhook execution (#2608) ... Webhook URLs were being fetched without validating whether they resolved to private/loopback addresses, exposing the server to SSRF. Current SSRF is best effort and fail open, you should never host services that you cant risk exposure of. This extracts webhook execution into a shared module that validates URLs against private IP ranges (including DNS resolution), enforces timeouts, and disables redirect following. The resend route now queues through the job system instead of calling fetch inline.	2026-03-13 15:02:09 +11:00
David Nguyen	d857dfdb38	feat: add webhook logs (#2237)	2025-11-25 16:03:52 +11:00