SnapOtter f64cbdda4e fix: block hex IPv4-mapped IPv6 in SSRF guard ...

The WHATWG URL parser canonicalizes dotted IPv4-mapped IPv6 literals
(e.g. ::ffff:127.0.0.1) to hex form (::ffff:7f00:1). The SSRF guard
only checked the dotted form, so hex literals bypassed the private-IP
classifier and allowed access to loopback, cloud metadata, and RFC1918
addresses.

Decode hex IPv4-mapped suffixes to dotted IPv4 before the private-range
check.

Reported-by: tonghuaroot

2026-06-06 20:27:48 +08:00

..

ai-bridge.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

ai-tools.test.ts

fix: convert input buffer to PNG before passing to face landmarks Python sidecar

2026-05-13 14:18:49 +08:00

analytics-env.test.ts

test: comprehensive analytics test suite — unit, API, E2E, air-gapped

2026-04-23 10:58:56 +08:00

analytics-no-leak.test.ts

fix: gate captureException on user consent and fix HEIC PII scrubbing

2026-04-29 23:47:19 +08:00

analytics-route.test.ts

test: major coverage expansion — 18 new test files, ~830 new tests

2026-04-26 12:03:08 +08:00

analytics.test.ts

chore(deps-dev): bump dev-deps group + fix vitest 3.2.6 mock resolution (#197)

2026-06-04 22:22:40 +08:00

anonymous-admin.test.ts

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

api-keys-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

audit-helpers.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

audit-lib.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

audit-log-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

auth-functions.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

auth-routes.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

auto-orient.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

batch.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

bg-effects.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

cleanup.test.ts

fix: resolve flaky cleanup test race condition in CI

2026-05-09 13:12:11 +08:00

csp.test.ts

fix: QR code logo causes preview to vanish and become unrecoverable

2026-05-06 21:38:12 +08:00

docs-route.test.ts

fix: replace hardcoded "52 tools" with "50+" across all copy

2026-05-20 14:45:45 +08:00

effective-permissions.test.ts

feat: remove app name and logo customization feature

2026-05-07 19:41:30 +08:00

errors.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

exiftool.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

features-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

fetch-urls-helpers.test.ts

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

file-storage.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

filename.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

files-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

format-decoders.test.ts

fix: tolerate missing ImageMagick for all format decoder/encoder tests in CI

2026-05-09 13:03:57 +08:00

format-encoders.test.ts

fix: tolerate missing ImageMagick for all format decoder/encoder tests in CI

2026-05-09 13:03:57 +08:00

heic-converter.test.ts

fix: clean up crop mode toggle, extend timeouts for long-running tools

2026-05-11 22:48:05 +08:00

meme-text-renderer.test.ts

feat(meme-generator): add text renderer with opentype.js SVG path generation

2026-05-08 16:01:46 +08:00

output-format.test.ts

fix: batch file ordering and format preservation for image tools (#20)

2026-04-06 12:53:53 +08:00

page-range.test.ts

test: comprehensive test coverage expansion (+965 tests)

2026-04-23 17:12:02 +08:00

permissions-extended.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

permissions.test.ts

feat: remove app name and logo customization feature

2026-05-07 19:41:30 +08:00

pipeline.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

progress.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

rbac-enforcement.test.ts

feat: remove app name and logo customization feature

2026-05-07 19:41:30 +08:00

roles-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

settings-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

ssrf.test.ts

fix: block hex IPv4-mapped IPv6 in SSRF guard

2026-06-06 20:27:48 +08:00

static-upload.test.ts

fix: resolve 6 production Sentry errors

2026-06-06 16:05:59 +08:00

svg-sanitize.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

teams-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

timeout.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

tool-factory-route.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

tool-factory.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

user-files-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

username-validation.test.ts

feat: production-grade RBAC with editor role, custom roles, API key scoping, and audit log (#89)

2026-04-22 18:10:04 +08:00

utilities.test.ts

fix: grant admin role to anonymous user and add DEFAULT_TOOL_VIEW env var

2026-05-16 11:37:28 +08:00

worker-pool.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00