pad/internal/urlimport at dbbbefda75d4fc4aaeac7bdaecd65eab772f00a9 - pad

mirror of https://github.com/PerpetualSoftware/pad.git synced 2026-10-26 14:30:13 +00:00

Files

T

xarmian fc64d92ece fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155 )

* fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660)

168.63.129.16 is a public address, so no reserved range covered it and URL
import (and webhooks, and appfetch, which share netpolicy.Blocked) would
connect to it. It goes in a new platformAddresses list. A census test pins
every provider metadata endpoint we know of against the range that blocks
it; WireServer was the only one no range covered. The urlimport package
comment that listed an older policy now points at netpolicy.

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

* docs(netpolicy): WireServer is in public address space, not reachable from the internet (BUG-3660, codex r1 Low)

Claude-Session: https://claude.ai/code/session_01Q9WssCjFuHjSfLABoW4tmS

2026-10-14 07:48:02 -04:00

testdata

feat(urlimport): OpenAPI 3.x → Markdown converter (TASK-1471) (#555 )

2026-05-15 00:24:14 -04:00

bug3358_address_policy_test.go

fix(netpolicy): one outbound address policy for URL import and webhooks (#1738 )

2026-10-02 17:09:12 -04:00

bug3660_wireserver_test.go

fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155 )

2026-10-14 07:48:02 -04:00

detect_test.go

feat(urlimport): URL fetcher with SSRF guard + content-type detection (TASK-1469) (#552 )