You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
What's Changed
Harden the link-unfurl guard against SSRF via IPv6 transition ranges (NAT64, 6to4)
and CGNAT, so link previews can't be steered to internal addresses (#225).
A security advisory with a CVE will follow.
Upgrade loofah to 2.25.2 and rails-html-sanitizer to 1.7.1 (#221)