project-nomad/admin/app/validators
Chris Sherwood 744de888cd fix(security): narrow SSRF scope to allow RFC1918 LAN addresses
NOMAD is a LAN appliance — blocking RFC1918 private ranges (10.x,
172.16-31.x, 192.168.x) would prevent users from downloading content
from local network mirrors. Narrowed to only block loopback (localhost,
127.x, 0.0.0.0, ::1) and link-local (169.254.x, fe80::) addresses.
Restored require_tld: false for LAN hostnames without TLDs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 21:44:11 -07:00
..
benchmark.ts feat: Add system benchmark feature with NOMAD Score 2026-01-22 21:48:12 -08:00
chat.ts feat: [wip] native AI chat interface 2026-01-31 20:39:49 -08:00
common.ts fix(security): narrow SSRF scope to allow RFC1918 LAN addresses 2026-03-08 21:44:11 -07:00
curated_collections.ts feat: curated content system overhaul 2026-02-11 15:44:46 -08:00
download.ts feat(Open WebUI): manage models via Command Center 2026-01-19 22:15:52 -08:00
ollama.ts feat(Models): paginate available models endpoint 2026-03-03 20:51:38 -08:00
rag.ts feat(RAG): allow deletion of files from KB 2026-03-04 20:05:14 -08:00
settings.ts feat(AI Assistant): custom name option for AI Assistant 2026-03-04 20:05:14 -08:00
system.ts feat: cron job for system update checks 2026-02-06 15:40:30 -08:00
zim.ts feat: [wip] custom map and zim downloads 2025-12-02 08:25:09 -08:00