4 Commits

Author	SHA1	Message	Date
Dan Brown	cf648906e9	SSR: Hardened URL validator against a range of workarounds ... Added a more comprehensive range of tests to cover. Thanks to naruhodoowl (https://github.com/kilhsrito-crypto) for reporting.	2026-04-30 10:18:50 +01:00
Dan Brown	5508c171db	PHP: Addressed 8.4 deprecations within app itself	2025-02-17 12:45:37 +00:00
Dan Brown	903895814a	SSR: Updated allow list handling & covered webhook usage ... - Covered webhook SSR allow list useage via test. - Updated allow list handling to use trailing slash, or hash, or end of line as late anchor for better handling for hosts (prevent .co.uk passing for .co domain host)	2023-08-26 20:13:37 +01:00
Dan Brown	c324ad928d	Security: Added new SSR allow list and validator ... Included unit tests to cover validator functionality. Added to webhooks. Still need to do testing specifically for webhooks.	2023-08-26 15:28:29 +01:00