Skip to content

Conversation

@mtrezza
Copy link
Member

@mtrezza mtrezza commented Nov 5, 2025

No description provided.

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title fix: ssrf 7 fix: Ssrf 7 Nov 5, 2025
@parse-github-assistant
Copy link

parse-github-assistant bot commented Nov 5, 2025

🚀 Thanks for opening this pull request!

@mtrezza mtrezza changed the base branch from alpha to release-7.x.x November 5, 2025 13:23
@coderabbitai
Copy link

coderabbitai bot commented Nov 5, 2025

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@mtrezza mtrezza closed this Nov 5, 2025
@parseplatformorg
Copy link
Contributor

parseplatformorg commented Nov 5, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@mtrezza mtrezza reopened this Nov 5, 2025
@codecov
Copy link

codecov bot commented Nov 5, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.15%. Comparing base (c10f4ac) to head (097e38d).
⚠️ Report is 3 commits behind head on release-7.x.x.

Additional details and impacted files
@@                Coverage Diff                @@
##           release-7.x.x    #9904      +/-   ##
=================================================
+ Coverage          93.06%   93.15%   +0.08%     
=================================================
  Files                187      187              
  Lines              14989    14972      -17     
=================================================
- Hits               13950    13947       -3     
+ Misses              1039     1025      -14     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@mtrezza mtrezza changed the title fix: Ssrf 7 fix: Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF) Nov 5, 2025
@mtrezza mtrezza merged commit 8bbe3ef into parse-community:release-7.x.x Nov 5, 2025
31 checks passed
parseplatformorg pushed a commit that referenced this pull request Nov 5, 2025
## [7.5.4](7.5.3...7.5.4) (2025-11-05)

### Bug Fixes

* Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF); fixes vulnerability [GHSA-x4qj-2f4q-r4rx](GHSA-x4qj-2f4q-r4rx) ([#9904](#9904)) ([8bbe3ef](8bbe3ef))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 7.5.4

@mtrezza mtrezza deleted the fix/ssrf-release-7 branch November 5, 2025 14:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants