mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-21 02:33:32 +00:00
rcourtman
413ef73953
addresses security vulnerabilities and improves webhook reliability Changes: - Add SSRF protection with redirect controls and strict URL validation - Add response size limits (1MB cap) to prevent memory exhaustion - Fix race condition in SendTestNotification - Add per-webhook rate limiting (10 req/min) - Add Retry-After header support for proper backoff - Extract magic numbers to configurable constants - Block localhost, link-local, and cloud metadata endpoints - Add secure HTTP client with redirect validation - Remove duplicate function definitions - Clean up unused code Security improvements: - Prevents SSRF attacks via redirect chains - Protects against DoS via large responses - Rate limits prevent webhook flooding - Thread-safe webhook operations 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>