Files
bsky-social-app/bskyweb/cmd
vineyardbovines f1d012000e fix(bskyweb): validate avatar URL scheme and bound fetch timeout
- Add SSRF defense: reject avatar URLs not starting with https://
- Add per-fetch timeout (5s) instead of relying on http.DefaultClient
- Document WebInviteWalletHero handler as unauthenticated by design
2026-06-25 16:38:57 -04:00
..