Pedro CastroandDevin AI cb36fc201f fix: add URL validation to webhook endpoints (#26593) ...

Validates webhook URLs on create and update:
- HTTPS required (HTTP allowed for self-hosted and E2E)
- Blocks private IP ranges and localhost
- Blocks cloud metadata endpoints

Existing webhooks are preserved: validation only applies when URL is created or changed.

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-02-05 16:18:10 -03:00

..

app-store

Revert "fix: add input validation to analytics app schemas (#26976)"

2026-02-05 01:01:33 +00:00

app-store-cli

refactor: apply biome formatting to several packages (#27439)

2026-02-05 07:24:34 -03:00

config

refactor: apply biome formatting to several packages (#27439)

2026-02-05 07:24:34 -03:00

coss-ui

feat: refactor UI to use coss + coupons UI (#27647)

2026-02-05 10:05:57 +00:00

dayjs

refactor: apply biome formatting to several packages (#27439)

2026-02-05 07:24:34 -03:00

debugging

chore: TS config - ignore node_modules in subdirectories (#19680)

2025-03-03 15:53:28 -03:00

ee

refactor: Migrate repositories/services from /lib to /features (#25925)

2025-12-17 14:14:50 +00:00

emails

Revert "init: hide cal branding on user level (#27594)" (#27626)

2026-02-04 17:00:52 +00:00

embeds

fix: reset embed iframe queue consistently to preserve UI commands (#27419)

2026-02-02 13:51:25 +00:00

features

optimize organization member removal (#27660)

2026-02-05 17:11:57 +00:00

kysely

refactor: apply biome formatting to several packages (#27439)

2026-02-05 07:24:34 -03:00

lib

fix: add URL validation to webhook endpoints (#26593)

2026-02-05 16:18:10 -03:00

platform

fix: use Object.prototype.hasOwnProperty.call for safe property checks (#27661)

2026-02-05 11:11:43 -03:00

prisma

feat: High Water Mark (HWM) billing for monthly subscriptions (#27559)

2026-02-05 09:56:31 +00:00

sms

chore: standarize rate limit structure (#25736)

2025-12-10 01:04:21 +00:00

testing

refactor: apply biome formatting to several packages (#27439)

2026-02-05 07:24:34 -03:00

trpc

fix: add URL validation to webhook endpoints (#26593)

2026-02-05 16:18:10 -03:00

tsconfig

fix: lock package versions and organize devDependencies (#26095)

2025-12-21 10:18:07 -03:00

types

fix: improve error handling in delegation credential workspace configuration (#26985)

2026-02-04 21:48:56 +00:00

ui

fix: ux audit changes (#26875)

2026-02-05 13:37:59 -03:00