3 people 60a171b19e fix(workflow): bypass system proxies for webhooks (#2800) ...

## Summary

Disable automatic system-proxy discovery for workflow webhook requests.

## Why

Webhook destinations are resolved, validated, and pinned before the
request to prevent DNS-rebinding SSRF. If reqwest uses a system proxy,
the proxy can resolve the original hostname itself instead of connecting
to the validated address, bypassing that pinning guarantee.

Calling `no_proxy()` keeps these security-sensitive requests on the
directly validated connection path. Redirects remain disabled.

## Test plan

- `cargo fmt --all -- --check`
- `cargo test -p buzz-workflow --features reqwest` (149 passed)
- `cargo clippy -p buzz-workflow --all-targets --features reqwest -- -D
warnings`
- `git diff --check`

Co-authored-by: Amp <amp@ampcode.com>

2026-07-24 22:24:47 -04:00

..

src

fix(workflow): bypass system proxies for webhooks (#2800)

2026-07-24 22:24:47 -04:00

Cargo.toml

feat(desktop): canonical <PubKey> component — hover to view/copy full keys, owner "you" labels (#1589)

2026-07-07 13:35:15 -07:00