12 Commits

Author	SHA1	Message	Date
Julien Neuhart	ff817f6cf8	chore(deps)!: migrate from regexp2 v1 to regexp2 v2	2026-09-17 15:33:55 +02:00
Julien Neuhart	70783a01c6	fix(gotenberg): retry pattern matches aborted by a process pause	2026-09-16 21:23:43 +02:00
Julien Neuhart	8e850b1c93	fix(outbound): ignore IPv6 zone identifiers when classifying addresses	2026-09-13 10:15:07 +02:00
Julien Neuhart	b39b8c76aa	perf(gotenberg): match allow and deny patterns without recompiling them	2026-09-08 18:34:58 +02:00
Julien Neuhart	40cf48442f	fix(outbound): treat CGNAT and benchmarking ranges as non-public	2026-09-05 11:34:03 +02:00
Julien Neuhart	83b01c2baa	fix(api): bound downloadFrom requests by the request deadline	2026-09-05 09:59:29 +02:00
Julien Neuhart	86a013b664	fix(outbound): strip URL userinfo before allow and deny list matching	2026-09-04 19:45:58 +02:00
Julien Neuhart	357c3b4a59	fix(outbound): return 403 instead of 500 for an unresolvable outbound host	2026-08-13 08:21:35 +02:00
Julien Neuhart	f9a01c9fb3	fix(gotenberg): block IPv6 prefixes that tunnel to internal IPv4 in IsPublicIP	2026-05-12 19:22:20 +02:00
Julien Neuhart	7a914fce65	fix(outbound)!: per-module deny-private-ips and deny-public-ips, permissive defaults	2026-04-23 20:01:27 +02:00
Julien Neuhart	35f1a990a6	fix(chromium): harden outbound URL handling	2026-04-22 07:47:19 +02:00
Julien Neuhart	924576d3d4	fix(outboundURLs): better detaults	2026-04-11 13:05:05 +02:00