Eugeniusz Gilewski 42626da1ce fix(security): pin DNS resolutions for SSRF-safe fetches ... Install connect-time DNS validation for Hermes-owned direct httpx clients so SSRF-sensitive fetch paths dial a vetted IP instead of re-resolving after preflight. This preserves Host/SNI semantics for direct HTTP(S) connections and keeps proxy routing as an explicit trusted egress boundary. Wire the guarded clients into media cache downloads, vision downloads, Skills Hub direct/raw fetches, and platform attachment fetch paths that already perform SSRF preflight and redirect validation. Fixes #8033 Co-authored-by: Tom Qiao <zqiao@microsoft.com>		2026-07-23 11:44:43 -07:00
..
__init__.py	feat(qqbot): add inline-keyboard approvals and update prompts	2026-05-07 07:36:30 -07:00
adapter.py	fix(security): pin DNS resolutions for SSRF-safe fetches	2026-07-23 11:44:43 -07:00
chunked_upload.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
constants.py	refactor(qqbot): split qqbot.py into package & add QR scan-to-configure onboard flow	2026-04-17 15:31:14 -07:00
crypto.py	refactor(qqbot): split qqbot.py into package & add QR scan-to-configure onboard flow	2026-04-17 15:31:14 -07:00
keyboards.py	fix(approval): scope smart deny owner overrides to one operation	2026-07-13 04:31:55 -07:00
onboard.py	refactor(qqbot): migrate qr onboard flow to sync + consolidate into onboard.py	2026-04-22 05:50:21 -07:00
utils.py	refactor(qqbot): split qqbot.py into package & add QR scan-to-configure onboard flow	2026-04-17 15:31:14 -07:00