sriram veeraghanta a8a16c8ba0 fix: replace IS_SELF_MANAGED with WEBHOOK_ALLOWED_IPS allowlist (#8884) ...

* fix: replace IS_SELF_MANAGED toggle with explicit WEBHOOK_ALLOWED_IPS allowlist

Instead of blanket-allowing all private IPs on self-managed deployments,
webhook URL validation now blocks all private/internal IPs by default and
only permits specific networks listed in the WEBHOOK_ALLOWED_IPS env
variable (comma-separated IPs/CIDRs).

* fix: address PR review comments for webhook SSRF protection

- Sanitize error messages to avoid leaking internal details to clients
- Guard against TypeError with mixed IPv4/IPv6 allowlist networks
- Re-validate webhook URL at send time to prevent DNS-rebinding
- Add unit tests for mixed-version IP network allowlists

2026-04-20 15:28:33 +05:30

..

bin

[WEB-5592] chore: add static files update settings for static files support (#8251)

2025-12-09 21:05:26 +05:30

plane

fix: replace IS_SELF_MANAGED with WEBHOOK_ALLOWED_IPS allowlist (#8884)

2026-04-20 15:28:33 +05:30

requirements

chore(deps): bump pytest (#8891)

2026-04-14 13:54:04 +05:30

templates

fix: update Twitter icon and links to X (#8785) (#8790)

2026-04-07 15:34:54 +05:30

.coveragerc

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

.env.example

- Add SIGNED_URL_EXPIRATION environment variable (#8136)

2025-12-03 10:52:19 +05:30

.prettierignore

fix: eslint (#8185)

2025-12-05 16:03:51 +05:30

Dockerfile.api

chore: updated node version to 22 and python version to 3.12.10 (#7343)

2025-07-04 16:28:30 +05:30

Dockerfile.dev

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

manage.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

package.json

chore: version bump

2026-03-31 17:09:35 +05:30

pyproject.toml

[WEB-5044] fix: ruff lint and format errors (#7868)

2025-09-29 19:15:32 +05:30

pytest.ini

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

requirements.txt

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30

run_tests.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

run_tests.sh

chore: rename server to api (#7342)

2025-07-04 15:32:21 +05:30