chaochaoweb3 410993a3bf fix: block private IPv6 URLs (#858) ...

* fix: block private IPv6 URLs

* fix: cover full fe80::/10 link-local range and :: unspecified

- Replace startsWith("fe80:") with a check covering the full fe80::/10
  range (fe80 through febf) per RFC 4291.
- Add :: (unspecified) to the localhost block.
- Drop the dead 0:0:0:0:0:0:0:1 branch (URL parser normalizes it to ::1).
- Add tests for fe9f::1, febf::1, and ::.

---------

Co-authored-by: dayuan.jiang <jdy.toh@gmail.com>

2026-06-06 00:30:20 +09:00

..

i18n

feat: add all Draw.io themes to settings panel (#835)

2026-05-15 23:14:20 +09:00

types

feat: upgrade MiniMax default model to M3 (#857)

2026-06-02 19:38:49 +09:00

ai-providers.ts

feat: upgrade MiniMax default model to M3 (#857)

2026-06-02 19:38:49 +09:00

base-path.ts

Support subdirectory deployment and fix API path handling (#311)

2025-12-22 23:28:55 +09:00

cached-responses.ts

refactor: simplify LLM XML format to output bare mxCells only (#254)

2025-12-14 14:04:44 +09:00

chat-helpers.ts

test: add Vitest and Playwright testing infrastructure (#512)

2026-01-05 01:37:32 +09:00

diagram-validator.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00

drawio-themes.ts

feat: add all Draw.io themes to settings panel (#835)

2026-05-15 23:14:20 +09:00

dynamo-quota-manager.ts

feat: migrate DynamoDB quota to composite key schema (#426)

2025-12-27 10:24:43 +09:00

langfuse.ts

refactor: simplify Langfuse integration with AI SDK 6 (#375)

2025-12-23 16:26:45 +09:00

pdf-utils.ts

feat: make PDF/text extraction char limit configurable via env (#214)

2025-12-11 14:14:31 +09:00

server-model-config.ts

feat: add API key load balancing for providers (#676)

2026-02-02 15:54:35 +09:00

session-storage.ts

chore: remove dead code from previous #815 fix attempts (#841)

2026-05-21 08:37:14 +09:00

ssrf-protection.ts

fix: block private IPv6 URLs (#858)

2026-06-06 00:30:20 +09:00

storage.ts

feat: add personal My Templates library alongside Quick Examples (#773)

2026-04-03 12:16:01 +09:00

system-prompts.ts

feat: add Material Design Icons shape library (#688)

2026-02-07 13:57:00 +09:00

template-storage.ts

chore: remove dead code from previous #815 fix attempts (#841)

2026-05-21 08:37:14 +09:00

url-utils.ts

Uses dynamic API endpoint for URL parsing

2026-01-30 00:02:26 +09:00

use-file-processor.tsx

refactor: eliminate code duplication (DRY principle) (#211)

2025-12-11 14:28:02 +09:00

use-quota-manager.tsx

feat: improve quota toast with ByteDance Doubao sponsorship info and model config button (#447)

2025-12-29 12:12:22 +09:00

user-id.ts

fix: use full IP for userId to prevent quota collision (#400)

2025-12-25 12:20:46 +09:00

utils.ts

chore: remove dead code and consolidate duplicate types (#555)

2026-01-10 14:06:17 +09:00

validation-prompts.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00

validation-schema.ts

Add VLM-based diagram validation (#602)

2026-01-20 20:52:04 +09:00