security(scanner): detect stored SSRF webhook persistence - #910

Merged

seonghobae merged 28 commits into

developfrom

sentinel/fix-webhook-ssrf-17689544248715160075

Aug 12, 2026

Commits on Aug 9, 2026

🛡️ Sentinel: [CRITICAL] Fix stored SSRF in webhook URL endpoint
seonghobae
committed
d157667
test(security): reject non-string webhook URLs
seonghobae
committed
5eddd98
test(security): exercise malformed webhook bodies at API boundary
seonghobae
committed
7bc59a1
🛡️ Sentinel: [CRITICAL] Fix stored SSRF and Uncaught Exception in webhook URL endpoint
seonghobae
committed
fbc77cb
test(scanner): reproduce stored SSRF detection gap
seonghobae
committed
e9d4946
security(scanner): detect direct stored webhook SSRF
seonghobae
committed
057df0e
test(controlplane): pin webhook input validation boundary
seonghobae
committed
3d6f57b
fix(controlplane): reject malformed webhook payloads
seonghobae
committed
6d55440
test(controlplane): prove invalid webhook input preserves state
seonghobae
committed
c9752fa
test(scanner): expose stored SSRF variable-flow blind spot
seonghobae
committed
1689ba7
fix(scanner): detect unvalidated stored SSRF variable flow
seonghobae
committed
30af47d
test(scanner): expose SSRF finding metadata misclassification
seonghobae
committed
35578cd
fix(scanner): classify CWE-918 findings as SSRF
seonghobae
committed
e051776
test(scanner): expose stored SSRF rule evasion paths
seonghobae
committed
e65cda8
fix(scanner): close stored SSRF rule evasion paths
seonghobae
committed
2cd9a8f
test(scanner): expose non-enforcing SSRF guard bypass
seonghobae
committed
2ce25b2
test(scanner): pin fail-closed SSRF guard semantics
seonghobae
committed
14240fa
fix(scanner): require enforcing SSRF validation guards
seonghobae
committed
48a6da5
docs(tests): document stored SSRF regression contracts
seonghobae
committed
40b5c63
test(scanner): expose equivalent stored SSRF accessors
seonghobae
committed
40c521e
fix(scanner): detect equivalent stored SSRF accessors
seonghobae
committed
999095e
docs(tests): document webhook validation helpers
seonghobae
committed
5ba9131

Navigation Menu

Uh oh!

security(scanner): detect stored SSRF webhook persistence - #910

security(scanner): detect stored SSRF webhook persistence#910
seonghobae merged 28 commits into
developfrom
sentinel/fix-webhook-ssrf-17689544248715160075

Commits on Aug 9, 2026

🛡️ Sentinel: [CRITICAL] Fix stored SSRF in webhook URL endpoint

test(security): reject non-string webhook URLs

test(security): exercise malformed webhook bodies at API boundary

🛡️ Sentinel: [CRITICAL] Fix stored SSRF and Uncaught Exception in webhook URL endpoint

test(scanner): reproduce stored SSRF detection gap

security(scanner): detect direct stored webhook SSRF

test(controlplane): pin webhook input validation boundary

fix(controlplane): reject malformed webhook payloads

test(controlplane): prove invalid webhook input preserves state

test(scanner): expose stored SSRF variable-flow blind spot

fix(scanner): detect unvalidated stored SSRF variable flow

test(scanner): expose SSRF finding metadata misclassification

fix(scanner): classify CWE-918 findings as SSRF

test(scanner): expose stored SSRF rule evasion paths

fix(scanner): close stored SSRF rule evasion paths

test(scanner): expose non-enforcing SSRF guard bypass

test(scanner): pin fail-closed SSRF guard semantics

fix(scanner): require enforcing SSRF validation guards

docs(tests): document stored SSRF regression contracts

test(scanner): expose equivalent stored SSRF accessors

fix(scanner): detect equivalent stored SSRF accessors

docs(tests): document webhook validation helpers

Commits on Aug 12, 2026

security(scanner): preserve stored SSRF detection after endpoint fix

perf(scanner): prefilter stored SSRF rule by sink literal

fix(scanner): evaluate stored SSRF validation per sink

fix(scanner): accept none-aware fail-closed SSRF guard

🎨 Palette: 개선된 파일 업로드 버튼 UX 적용 (#925)

chore: restack stored SSRF scanner on current develop