Abhinav Raut 9566dcbf4d apply SSRF guard to all admin-configured outbound URLs ...

Move the webhook SSRF guard into a shared internal/ssrf package and wire it
into every place the server fetches an admin-set URL: webhooks, OIDC discovery,
the AI provider base URL, and custom AI tool calls. Add a global [ssrf] config
block, off by default with an allowed_cidrs bypass, so single-tenant self-hosters
keep reaching internal hosts while multi-tenant or hosted deploys can turn it on.
The old [webhook] allowed_hosts key is still read for backward compat and folds
into the guard.

2026-07-16 12:58:12 +05:30

..

actvity_log.go

resolve sql builder date filters in the app timezone instead of UTC

2026-06-18 11:56:43 +05:30

agent_import.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

ai.go

add AI snippet URL import, conversation summarize, and assistant reply languages

2026-07-16 01:39:45 +05:30

aiagent.go

address CodeRabbit findings in AI embedding and assistant flows

2026-07-16 12:50:02 +05:30

auth.go

harden contact create, drop set-away-on-login, make status dots colorblind-safe

2026-07-08 12:14:36 +05:30

automation.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

business_hours.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

chat.go

fix duplicate contact creation on transient error during ext_id enrichment

2026-07-10 01:06:38 +05:30

config.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

contacts.go

resolve sql builder date filters in the app timezone instead of UTC

2026-06-18 11:56:43 +05:30

context_links.go

WS rewrite: per-client subscriptions and perf improvements

2026-05-20 23:42:07 +05:30

conversation.go

send CSAT on every resolve path

2026-07-12 04:47:43 +05:30

csat.go

Add new csat widget that just accepts

2026-04-09 13:55:39 +05:30

custom_attributes.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

draft.go

move isValidDraftType to bottom of file

2026-07-05 18:42:33 +05:30

handlers.go

add AI snippet URL import, conversation summarize, and assistant reply languages

2026-07-16 01:39:45 +05:30

i18n.go

Update languages codes to include regions names and set default language to

2026-05-15 07:09:51 +02:00

inboxes.go

feat: add customisable From display name template for outgoing emails

2026-06-07 14:20:56 +05:30

init.go

apply SSRF guard to all admin-configured outbound URLs

2026-07-16 12:58:12 +05:30

install.go

fix: translation keys

2025-04-03 03:00:11 +05:30

login.go

harden contact create, drop set-away-on-login, make status dots colorblind-safe

2026-07-08 12:14:36 +05:30

macro.go

WS rewrite: per-client subscriptions and perf improvements

2026-05-20 23:42:07 +05:30

main.go

apply SSRF guard to all admin-configured outbound URLs

2026-07-16 12:58:12 +05:30

media.go

WS rewrite: per-client subscriptions and perf improvements

2026-05-20 23:42:07 +05:30

messages_delete.go

soft-delete private notes with a tombstone instead of removing them

2026-07-08 00:43:29 +05:30

messages_test.go

Fix quoted image resolution

2026-05-15 02:47:30 +05:30

messages.go

Mark assignment notifications read on action

2026-07-06 13:32:16 +06:00

middlewares.go

Strip csat uui for agents (session) but keep for api consumers

2026-04-08 12:57:05 +05:30

notifications.go

Mark assignment notifications read on action

2026-07-06 13:32:16 +06:00

oauth.go

fix inbox form binding wait_timeout to wrong key, never persisting SMTP pool wait timeout

2026-04-23 14:53:20 +05:30

oidc.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

priorities.go

fix: bugs in conversation list filters getting applied without clicking the apply button

2024-11-04 02:03:55 +05:30

report.go

feat: Make convo panels resizable

2025-12-26 04:52:30 +05:30

roles.go

fix: close ws stale-perm gaps and resub on reconnect

2026-05-28 20:07:19 +05:30

search.go

fix: filter search results by conversation read permission

2026-05-28 21:38:57 +05:30

settings.go

resolve sql builder date filters in the app timezone instead of UTC

2026-06-18 11:56:43 +05:30

sla.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

statuses.go

feat: add conversation status categories and update related logic.

2026-04-21 16:55:09 +05:30

tag_import.go

Add tag importer with file similar to agent import.

2026-04-09 15:35:29 +05:30

tags.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

teams.go

fix: log team-member fetch errors during cache invalidation

2026-05-21 21:44:25 +05:30

templates.go

fix: harden media + conversation queries against empty-uuid casts

2026-05-19 14:13:56 +05:30

updates.go

fix: reduce update check interval and initial sleep duration

2025-02-28 22:12:01 +05:30

upgrade.go

gate AI tool identity to verified contacts and merge v2.6.0 migration into v2.7.0

2026-07-12 05:10:45 +05:30

user_notifications.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

users.go

render AI agent replies as markdown and fix assistant identity, handoff, and stats bugs

2026-07-12 23:12:44 +05:30

views.go

feat: support nested AND/OR filter groups and new fields in views

2026-06-16 16:14:12 +05:30

webhooks.go

i18n: fix localization issues (#231)

2026-02-22 15:12:00 +05:30

websocket.go

WS rewrite: per-client subscriptions and perf improvements

2026-05-20 23:42:07 +05:30

widget_middleware.go

Hard widget endpoints

2026-04-17 02:41:40 +05:30

widget_ws.go

WS rewrite: per-client subscriptions and perf improvements

2026-05-20 23:42:07 +05:30