Teknium d65468e7ff fix(security): SSRF guard yuanbao media download_url (#54470) ... yuanbao_media.download_url() fetched model-supplied (outbound) and inbound image/file URLs server-side via httpx with follow_redirects=True and no SSRF check. A model response containing <img src="http://169.254.169.254/..."> routed through ImageUrlHandler -> download_url and would fetch cloud-metadata endpoints; same for inbound media. Add an is_safe_url() pre-flight plus an async redirect event-hook that re-validates every 30x target, matching the cache_image_from_url() guard in gateway/platforms/base.py. The other gateway adapters already guard their URL-fetch paths; this was the remaining unguarded one.		2026-06-28 15:29:59 -07:00
..
assets	fix: improve telegram topic mode setup	2026-05-04 12:07:17 -07:00
builtin_hooks	remove: BOOT.md built-in hook (#17093)	2026-04-28 09:50:27 -07:00
platforms	fix(security): SSRF guard yuanbao media download_url (#54470)	2026-06-28 15:29:59 -07:00
relay	feat(relay): multi-platform-per-agent — list identity, provision-loop, N-hello, per-frame egress (Phase 1.5) (#52830)	2026-06-26 17:32:46 +10:00
__init__.py	docs(gateway): mention Weixin in gateway help and docstrings	2026-05-12 17:08:51 -07:00
authz_mixin.py	fix(telegram): apply bot auth policy to Telegram sources	2026-06-28 00:57:03 -07:00
cgroup_cleanup.py	fix: satisfy ruff encoding + windows-footgun lints for cgroup reaper	2026-06-28 02:05:50 -07:00
channel_directory.py	docs(sessions): clarify sessions.json is the gateway routing index, not the session list (#51726)	2026-06-23 23:56:36 -07:00
code_skew.py	fix(gateway): refuse model switch on stale checkout to avoid env_float ImportError	2026-06-24 04:16:54 +05:30
config.py	fix(gateway): make bg-process reset TTL configurable + surface session-scoped processes	2026-06-27 20:45:43 -07:00
delivery.py	fix(delivery): drop env-var knob, flag all chunking adapters	2026-06-22 05:41:22 -07:00
display_config.py	feat(discord): render reasoning as -# subtext via display.reasoning_style (#51168)	2026-06-23 10:44:02 -07:00
drain_control.py	fix(gateway): stamp drain marker with instantiation epoch so a durable-volume restart clears it (NS-570)	2026-06-26 18:59:41 +05:30
hooks.py	feat(hooks): expose thread_id and chat_type in agent:start/end context (#41672)	2026-06-07 19:16:36 -07:00
kanban_watchers.py	fix(kanban): honor kanban.auto_decompose toggle live, without a gateway restart (#50358)	2026-06-21 12:43:44 -07:00
memory_monitor.py	Port from cline/cline#10343: periodic gateway memory logging (#27102)	2026-05-16 12:55:23 -07:00
message_timestamps.py	feat(gateway): inject stable human-readable message timestamps	2026-06-16 15:49:59 -07:00
mirror.py	fix(cron): mirror continuable cron as a labelled user turn (alternation-safe)	2026-06-24 20:27:05 -07:00
pairing.py	fix(gateway): preserve WhatsApp pairing approvals across JID/LID alias flips	2026-05-23 01:46:34 -07:00
platform_registry.py	perf(startup): lazy-load gateway platform adapters (#54448)	2026-06-28 15:11:59 -07:00
response_filters.py	fix(gateway): suppress exact silence tokens without mutating history	2026-06-14 03:25:08 -07:00
restart.py	fix(gateway): exit 78 (EX_CONFIG) on fatal startup errors, s6 finish script stops restart loop	2026-06-24 16:34:51 +10:00
rich_sent_store.py	fix(telegram): resolve replies to rich (sendRichMessage) messages	2026-06-16 13:04:20 -07:00
run.py	fix(gateway): preserve sessions across restarts (#54442)	2026-06-28 15:10:39 -07:00
runtime_footer.py	chore: prune unused imports and duplicate import redefinitions	2026-05-28 22:26:25 -07:00
scale_to_zero.py	feat(gateway): scale-to-zero idle detection + dormant-quiesce (Phase 0)	2026-06-24 18:47:18 -07:00
session.py	fix(gateway): preserve sessions across restarts (#54442)	2026-06-28 15:10:39 -07:00
session_context.py	fix(api-server): stop silently promising async delivery on stateless HTTP path (#50319)	2026-06-21 12:15:14 -07:00
shutdown_forensics.py	chore: ruff auto-fixes — collapsible-else-if, if-stmt-min-max, dict.fromkeys (#23926)	2026-05-11 11:03:29 -07:00
slash_access.py	feat(gateway): per-platform admin/user split for slash commands (salvage of #4443) (#23373)	2026-05-10 12:33:54 -07:00
slash_commands.py	fix(gateway): clear stale base_url on model switches	2026-06-27 21:23:25 -07:00
status.py	fix(windows): cover remaining console-flash spawn legs (#54417)	2026-06-28 13:49:08 -07:00
sticker_cache.py	fix: guard yaml.safe_load, flock unlock, TOCTOU races, and atomic writes	2026-05-19 00:12:41 -07:00
stream_consumer.py	fix(gateway): respect adapter decline of fresh-final to prevent double delivery	2026-06-21 13:55:50 -07:00
stream_dispatch.py	feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)	2026-06-02 00:33:50 -07:00
stream_events.py	feat(gateway): structured stream-event protocol + Telegram draft formatting parity (#37250)	2026-06-02 00:33:50 -07:00
whatsapp_identity.py	fix(whatsapp): resolve LID aliases on modern platforms/ session layout	2026-06-28 02:05:26 -07:00