Skip to content

fix(release): add IP filtering to app release URLs#1838

Merged
edward-ly merged 3 commits into
masterfrom
fix/requests_hardened
Jul 16, 2026
Merged

fix(release): add IP filtering to app release URLs#1838
edward-ly merged 3 commits into
masterfrom
fix/requests_hardened

Conversation

@edward-ly

Copy link
Copy Markdown
Collaborator

Replaces the requests package with the requests_hardened package in the app release upload endpoint, adding additional validation to the app release URLs submitted by app maintainers. With this change, the console log now includes entries such as:

Forbidden IP address: 192.168.1.1 for hostname 192.168.1.1
Bad Request: /api/v1/apps/releases
"POST /api/v1/apps/releases HTTP/1.1" 400 49

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI

@edward-ly
edward-ly force-pushed the fix/requests_hardened branch from b9eeaec to 3dd1676 Compare July 16, 2026 15:29
Signed-off-by: Edward Ly <contact@edward.ly>
Signed-off-by: Edward Ly <contact@edward.ly>
Assisted-by: OpenCode:GLM-5.2
Signed-off-by: Edward Ly <contact@edward.ly>
@edward-ly
edward-ly force-pushed the fix/requests_hardened branch from 3dd1676 to 1ad8181 Compare July 16, 2026 15:39
@edward-ly
edward-ly merged commit fd4f79f into master Jul 16, 2026
8 checks passed
@edward-ly
edward-ly deleted the fix/requests_hardened branch July 16, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants