fix(security): SSRF via unvalidated tokenUrl + unbounded response DoS - #1663

Open

Sunil56224972 wants to merge 6 commits into

corsairdev:mainfrom

Sunil56224972:security/ssrf-dos-critical-fixes

Commits on Sep 8, 2026

fix(security): SSRF via unvalidated tokenUrl + unbounded response DoS
Sunil56224972
committed
ad2e5e4
fix: lint formatting for toThrow() calls and throw statement
Sunil56224972
committed
49666ac
chore: remove stale files from previous branch
Sunil56224972
committed
e62b812
fix: use Jest globals instead of vitest import, rewrite DoS tests as source verification
Sunil56224972
committed
07e5ee5
fix: biome format — collapse single-line toContain
Sunil56224972
committed
58cc9da
fix: remove trailing blank line from test file
Sunil56224972
committed
4d3723b