fettpl 55b3c2c00c test(security): add HTTP hostname canonicalization edge-case tests (#522) ...

* test(security): add HTTP hostname canonicalization edge-case tests

Document that Rust's IpAddr::parse() rejects non-standard IP notations
(octal, hex, decimal integer, zero-padded) which provides defense-in-depth
against SSRF bypass attempts. Tests only — no production code changes.

Closes #515

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: apply rustfmt to providers/mod.rs

Fix pre-existing formatting issue from main.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 08:16:00 -05:00

..

agent

feat(channel): add capabilities to system prompt (#531)

2026-02-17 08:02:11 -05:00

channels

fix(channels): resolve telegram reply target and media delivery (#525)

2026-02-17 08:07:23 -05:00

config

feat(discord): add mention_only config for @-mention trigger (#529)

2026-02-17 08:01:27 -05:00

cost

feat(browser): add optional computer-use sidecar backend (#335)

2026-02-17 00:31:45 +08:00

cron

feat(discord): add mention_only config for @-mention trigger (#529)

2026-02-17 08:01:27 -05:00

daemon

feat(channels): add lark/feishu websocket long-connection mode

2026-02-17 19:03:12 +08:00

doctor

feat(doctor): harden provider and workspace diagnostics

2026-02-17 17:20:56 +08:00

gateway

fix(channels): resolve telegram reply target and media delivery (#525)

2026-02-17 08:07:23 -05:00

hardware

Ehu shubham shaw contribution --> Hardware support (#306)

2026-02-16 11:40:10 -05:00

health

test: deepen and complete project-wide test coverage (#297)

2026-02-16 05:58:24 -05:00

heartbeat

test: deepen and complete project-wide test coverage (#297)

2026-02-16 05:58:24 -05:00

integrations

feat(channels): add DingTalk channel via Stream Mode

2026-02-17 00:53:13 +08:00

memory

fix(memory): harden lucid recall timeout and add cold-start test (#466)

2026-02-17 07:52:11 -05:00

observability

fix(api): retain agent and observability re-exports

2026-02-17 20:00:08 +08:00

onboard

feat(discord): add mention_only config for @-mention trigger (#529)

2026-02-17 08:01:27 -05:00

peripherals

fix: resolve all clippy warnings, formatting, and Mistral endpoint

2026-02-17 20:00:08 +08:00

providers

feat(provider): add LM Studio provider alias

2026-02-17 20:02:40 +08:00

rag

chore(lint): extend low-risk clippy cleanup batch

2026-02-17 16:40:58 +08:00

runtime

fix: replace std::sync::Mutex with parking_lot::Mutex (#350)

2026-02-16 15:02:46 -05:00

security

security: fix argument injection in shell command validation (#465)

2026-02-17 08:11:20 -05:00

service

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

skillforge

fix(providers): use Bearer auth for Gemini CLI OAuth tokens

2026-02-15 14:32:33 -05:00

skills

fix(skills): prevent path traversal in skill remove command

2026-02-15 08:15:41 -05:00

tools

test(security): add HTTP hostname canonicalization edge-case tests (#522)

2026-02-17 08:16:00 -05:00

tunnel

test: deepen and complete project-wide test coverage (#297)

2026-02-16 05:58:24 -05:00

identity.rs

fix(providers): use Bearer auth for Gemini CLI OAuth tokens

2026-02-15 14:32:33 -05:00

lib.rs

Implement cron job management tools and types

2026-02-17 17:06:28 +08:00

main.rs

fix(cli): respect config gateway.port and gateway.host for Gateway/Daemon commands (#456)

2026-02-17 08:10:32 -05:00

migration.rs

feat(memory): add session_id isolation to Memory trait (#530)

2026-02-17 07:44:05 -05:00

util.rs

fix(channels): check response status in send() for Telegram, Slack, and Discord

2026-02-15 09:48:58 -05:00