SnapOtterandGitHub f75cc328ac fix(security): numeric CIDR matching for IPv6 SSRF allow/deny ...

Replace textual prefix matching in isPrivateIPv6() with numeric bit-prefix matching via ipaddr.js. Closes reachable classifier bypasses for IPv4-compatible IPv6 (::a.b.c.d), site-local fec0::/10, and the full fe80::/10 link-local span, on top of the IPv4-mapped forms. Embedded IPv4 (mapped and compatible) is run through the full isPrivateIPv4 classifier; unparseable input fails closed.

Follow-up hardening to f64cbdda.

Reported-by: tonghuaroot

2026-06-21 23:20:28 +08:00

..

ai-bridge.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

ai-tools.test.ts

fix: convert input buffer to PNG before passing to face landmarks Python sidecar

2026-05-13 14:18:49 +08:00

alert-evaluator.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

analytics-env.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

analytics-no-leak.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

analytics-route.test.ts

test: major coverage expansion — 18 new test files, ~830 new tests

2026-04-26 12:03:08 +08:00

analytics.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

anonymous-admin.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

api-keys-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

aspect-tools.test.ts

feat(tools): 2.0 phase 5 wave 3a - video depth (22 tools) (#221)

2026-06-13 10:19:00 +08:00

audio-output.test.ts

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

audit-archival.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

audit-helpers.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

audit-integrity.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

audit-lib.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

audit-log-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

audit-system.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

auth-functions.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

auth-routes.test.ts

test(web): align unit + e2e expectations with section routes

2026-06-20 23:35:37 +08:00

auto-orient.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

background-composite.test.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

batch.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

beautify-backgrounds.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

beautify-frames.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

beautify-shadow.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

bg-effects.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

bullmq-context-propagation.test.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

compute-delete-after.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

csp.test.ts

fix: QR code logo causes preview to vanish and become unrecoverable

2026-05-06 21:38:12 +08:00

docs-route.test.ts

test(web): align unit + e2e expectations with section routes

2026-06-20 23:35:37 +08:00

effective-permissions.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

encryption.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

enterprise-flags.test.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

enterprise-mock.test.ts

style: apply Biome formatting to enterprise files

2026-06-14 14:53:44 +08:00

errors-friendly.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

errors.test.ts

fix(jobs): strip internal paths from all worker SSE error frames

2026-06-13 10:36:01 +08:00

exiftool.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

external-auth-resolver.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

features-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

fetch-urls-helpers.test.ts

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

file-storage.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

filename.test.ts

fix: handle non-image modalities across uploads, previews, and filenames (#255)

2026-06-16 18:04:48 +08:00

files-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

format-decoders.test.ts

test: migrate last dynamic format-decoders fixture ref to registry

2026-06-20 04:21:12 +08:00

format-encoders.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

heic-converter.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

ip-allowlist.test.ts

test(web): align unit + e2e expectations with section routes

2026-06-20 23:35:37 +08:00

license-validation.test.ts

fix: resolve 18 QA-discovered bugs across tools, previews, and the AI pipeline (#242)

2026-06-15 22:26:24 +08:00

log-trace-mixin.test.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

meme-templates.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

meme-text-renderer.test.ts

feat(meme-generator): add text renderer with opentype.js SVG path generation

2026-05-08 16:01:46 +08:00

mfa.test.ts

feat(enterprise): add TOTP MFA with enrollment, verification, and recovery codes

2026-06-13 22:49:00 +08:00

object-storage.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

output-format.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

page-range.test.ts

test: comprehensive test coverage expansion (+965 tests)

2026-04-23 17:12:02 +08:00

page-spec.test.ts

feat(tools): 2.0 phase 5 wave 2 - pdf depth (21 tools) (#220)

2026-06-13 10:18:55 +08:00

pdf-to-image.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

permissions-extended.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

permissions.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

pipeline.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

postprocess.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

progress.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

rbac-enforcement.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

roles-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

settings-helpers.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

settings-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

sidecar-context-propagation.test.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

siem-forward.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

ssrf.test.ts

fix(security): numeric CIDR matching for IPv6 SSRF allow/deny

2026-06-21 23:20:28 +08:00

static-upload.test.ts

fix: resolve 6 production Sentry errors

2026-06-06 16:05:59 +08:00

storage-reconciliation.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00

subtitle-format.test.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

svg-sanitize.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

teams-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

timeout.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

tool-factory-route.test.ts

feat(api): section-prefix factory + batch routes via apiToolPath (+section validation)

2026-06-20 11:44:36 +08:00

tool-factory.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

tracing-bootstrap.test.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

user-files-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

username-validation.test.ts

feat: production-grade RBAC with editor role, custom roles, API key scoping, and audit log (#89)

2026-04-22 18:10:04 +08:00

utilities.test.ts

test: migrate 207 test files to typed fixture registry (phase 5)

2026-06-20 04:20:17 +08:00

venv-upgrade-stamp.test.ts

test: reorganize flat test files into purpose-based subdirectories (phase 6)

2026-06-20 05:07:46 +08:00

video-speed.test.ts

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

webhook-delivery.test.ts

test: add enterprise feature test coverage

2026-06-14 16:50:35 +08:00