Skip to content

v1.1.2: stop blocking secret-shaped URLs in NetworkPolicy

Choose a tag to compare

View all tags
@CuriosityOS CuriosityOS released this 24 Jul 06:35
v1.1.2
15ccfa2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Network policy

NetworkPolicy no longer refuses URLs that look like they carry an API key or JWT (query/path heuristics for sk-…, ghp_…, JWTs, etc.). That check and the blockSecretBearingUrls option are gone.

Still blocked as before:

  • Cloud instance-metadata endpoints (unliftable)
  • Non-web schemes (only http/https/ws/wss, plus about:blank/data:/blob:)
  • Optional private/loopback hardening and blockHosts / allowHosts

Docs, TypeScript types, unit tests, and policy conformance vectors match the new posture.

Assets 2
Loading