CaIon 20399d3c8f fix: harden SSRF protection for unauthenticated and user-level endpoints ...

- Add ValidateURLWithFetchSetting check before fetching MJ image URLs
  in RelayMidjourneyImage (unauthenticated endpoint)
- Add ValidateURLWithFetchSetting check before fetching video URLs
  in VideoProxy (upstream-controlled URL)
- Enable ApplyIPFilterForDomain by default to prevent DNS rebinding
  bypass of SSRF protection
- Elevate FetchModels endpoint from AdminAuth to RootAuth
- Update frontend: mark domain IP filtering as recommended, update
  description and i18n translations (zh-CN/zh-TW/en/fr/ja/ru/vi)

2026-03-31 17:57:47 +08:00

..

api-router.go

fix: harden SSRF protection for unauthenticated and user-level endpoints

2026-03-31 17:57:47 +08:00

dashboard.go

feat(middleware): add RouteTag middleware for enhanced logging and routing

2026-02-25 00:11:24 +08:00

main.go

feat(middleware): add RouteTag middleware for enhanced logging and routing

2026-02-25 00:11:24 +08:00

relay-router.go

feat: comment out notify endpoint in relay router

2026-03-12 19:05:30 +08:00

video-router.go

feat(middleware): add RouteTag middleware for enhanced logging and routing

2026-02-25 00:11:24 +08:00

web-router.go

feat(middleware): add RouteTag middleware for enhanced logging and routing

2026-02-25 00:11:24 +08:00