fix: address security review - SSRF protection, credential logging, memory leak, type safety#2

Merged

AkkiaS7 merged 10 commits intodevfrom

copilot/sub-pr-1

Feb 13, 2026

Commits on Feb 13, 2026

Initial plan
Copilot
committed
fix: address security review comments - webhook URL logging, SSRF protection, memory leak, and type safety

Copilot
and
AkkiaS7
committed
test: add coverage for webhook cleanup and domain whitelist validation

Copilot
and
AkkiaS7
committed
refactor: address code review feedback - extract constants, improve logging, fix test naming

Copilot
and
AkkiaS7
committed
refactor: use consistent constants for URL masking across modules

Copilot
and
AkkiaS7
committed
refactor: extract URL masking to shared utility module to eliminate duplication

Copilot
and
AkkiaS7
committed
fix: improve exception handling and avoid exposing whitelist in error messages

Copilot
and
AkkiaS7
committed
fix: improve URL masking, use hostname for whitelist validation, add option to disable whitelist, use JSON format for env config

Copilot
and
AkkiaS7
committed
refactor: simplify whitelist check logic and clarify docstring

Copilot
and
AkkiaS7
committed
fix pre-commit error
AkkiaS7
committed