jakeaturner 736c9bd672 fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass ... Replace literal string matching with ipaddr.js parsing so equivalent encodings of 169.254.169.254 (::ffff:169.254.169.254, ::ffff:a9fe:a9fe,fully-expanded forms) and fd00:ec2::254 are all rejected.		2026-05-20 10:16:00 -07:00
..
controllers	fix(AI): improve remote Ollama url validation to prevent SSRF vulnerability	2026-05-20 10:16:00 -07:00
exceptions	fix(Docs): documentation renderer fixes	2025-12-23 16:00:33 -08:00
jobs	fix(KB): respect Manual ingest policy on post-download dispatch	2026-05-20 10:16:00 -07:00
middleware	fix(API): skip compression for Server-Sent Events (#798)	2026-05-20 10:16:00 -07:00
models	fix(models): correct inverted belongsTo keys on ChatMessage.session (#921)	2026-05-20 10:16:00 -07:00
services	fix(content): show selected tier on cards while downloads are in flight	2026-05-20 10:16:00 -07:00
utils	refactor(KB): move FileWarning to shared types/rag following existing convention	2026-05-20 10:16:00 -07:00
validators	fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass	2026-05-20 10:16:00 -07:00