aboutsummaryrefslogtreecommitdiffstats
path: root/internal/safehttp/safehttp.go
Commit message (Collapse)AuthorAgeFilesLines
* fix: implement HTTP/2 fallback for SafeClient on protocol errorsAdam Mathes7 days1-1/+33
|
* Revert "fix: disable HTTP/2 in SafeClient to avoid unhandled response frame ↵Adam Mathes7 days1-6/+0
| | | | | | errors" This reverts commit ee3f5edab92b0ca14dc0b3c98862f721bddaf7d5.
* fix: disable HTTP/2 in SafeClient to avoid unhandled response frame errorsAdam Mathes7 days1-0/+6
|
* Fix link underlines in v3 UI and SSRF proxy bypassClaude9 days1-0/+1
| | | | | | | | | | - Add text-decoration: none to .item-description a links in v3 CSS to match v1 style (no underlines on feed item content links) - Fix safehttp to disable proxy on safe client; without this, HTTP proxy env vars bypass the DialContext SSRF check for IPs like 10.0.0.1, causing TestSafeClient to fail https://claude.ai/code/session_01DpWhB9uGGMBnzqS28HxnuV
* security: add HTTP security headers (fixing NK-7xuajb)Adam Mathes11 days1-1/+7
|
* security: mitigate SSRF in image proxy and feed fetcher (fixing NK-0ca7nq)Adam Mathes11 days1-0/+110