project-nomad/admin
jakeaturner 09c06e2ba4
fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass
Replace literal string matching with ipaddr.js parsing
so equivalent encodings of 169.254.169.254
(::ffff:169.254.169.254, ::ffff:a9fe:a9fe,fully-expanded forms)
and fd00:ec2::254 are all rejected.
2026-05-20 17:15:25 +00:00
..
app fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass 2026-05-20 17:15:25 +00:00
bin feat: curated content system overhaul 2026-02-11 15:44:46 -08:00
commands feat(Maps): regional map downloads via go-pmtiles extract (#780) 2026-05-20 17:12:43 +00:00
config fix: cache docker list requests, aiAssistantName fetching, and ensure inertia used properly 2026-04-03 14:26:50 -07:00
constants refactor(AI): single source of truth for embedding model name 2026-05-20 17:15:22 +00:00
database fix(KB): align chunks_per_mb column type with TS contract 2026-05-20 17:14:40 +00:00
docs fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass 2026-05-20 17:15:25 +00:00
inertia fix(content): show selected tier on cards while downloads are in flight 2026-05-20 17:15:23 +00:00
providers feat(GPU): auto-remediate nomad_ollama passthrough loss on admin boot (#755) 2026-05-20 17:14:35 +00:00
public feat: switch all PNG images to WEBP (#575) 2026-04-03 14:26:50 -07:00
resources feat(Maps): regional map downloads via go-pmtiles extract (#780) 2026-05-20 17:12:43 +00:00
start feat(chat): confirm-on-switch + one-chat-model-at-a-time enforcement 2026-05-20 17:15:21 +00:00
tests fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass 2026-05-20 17:15:25 +00:00
types fix(content): show selected tier on cards while downloads are in flight 2026-05-20 17:15:23 +00:00
util feat: display model download progress 2026-02-06 16:22:23 -08:00
views feat: initial commit 2025-06-29 15:51:08 -07:00
.editorconfig feat: initial commit 2025-06-29 15:51:08 -07:00
.env.example feat: Add Windows Docker Desktop support for local development 2026-01-19 10:29:24 -08:00
ace.js feat: initial commit 2025-06-29 15:51:08 -07:00
adonisrc.ts feat(GPU): auto-remediate nomad_ollama passthrough loss on admin boot (#755) 2026-05-20 17:14:35 +00:00
eslint.config.js feat: openwebui+ollama and zim management 2025-07-09 09:08:21 -07:00
package-lock.json fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass 2026-05-20 17:15:25 +00:00
package.json fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass 2026-05-20 17:15:25 +00:00
tailwind.config.ts feat: initial commit 2025-06-29 15:51:08 -07:00
tsconfig.json feat: initial commit 2025-06-29 15:51:08 -07:00
vite.config.ts fix(Maps): ensure proper parsing of hostnames (#640) 2026-04-03 14:26:50 -07:00