sriram veeraghanta 761c999e0c fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets (#9078) ...

* fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets

The IP-based allowlist alone isn't practical for containerised deployments
where service IPs are dynamic. Adds a hostname-based bypass for trusted
internal services (e.g. Silo via docker-compose / k8s service DNS) and
makes the previously hardcoded ["plane.so"] domain blocklist configurable
via WEBHOOK_DISALLOWED_DOMAINS.

- validate_url accepts allowed_hosts (exact, case-insensitive match;
  skips DNS lookup for trusted names)
- WebhookSerializer wires both settings through and lets allowlisted
  hosts bypass the disallowed-domain check
- Exposes WEBHOOK_ALLOWED_HOSTS in aio/cli deployment env files

* fix: default WEBHOOK_DISALLOWED_DOMAINS to empty for self-hosted

* fix: pass WEBHOOK_ALLOWED_HOSTS to send-time webhook re-validation

2026-05-15 00:57:39 +05:30

..

bin

[WEB-5592] chore: add static files update settings for static files support (#8251)

2025-12-09 21:05:26 +05:30

plane

fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets (#9078)

2026-05-15 00:57:39 +05:30

requirements

chore(deps): bump lxml (#8925)

2026-04-22 13:03:43 +05:30

templates

fix: update Twitter icon and links to X (#8785) (#8790)

2026-04-07 15:34:54 +05:30

.coveragerc

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

.env.example

- Add SIGNED_URL_EXPIRATION environment variable (#8136)

2025-12-03 10:52:19 +05:30

.prettierignore

fix: eslint (#8185)

2025-12-05 16:03:51 +05:30

Dockerfile.api

chore: updated node version to 22 and python version to 3.12.10 (#7343)

2025-07-04 16:28:30 +05:30

Dockerfile.dev

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

manage.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

package.json

chore: bump up the package version

2026-04-20 17:20:12 +05:30

pyproject.toml

[WEB-5044] fix: ruff lint and format errors (#7868)

2025-09-29 19:15:32 +05:30

pytest.ini

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

requirements.txt

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

run_tests.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

run_tests.sh

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30