Skip to content

test(security): cover invalid URL types across validators - #926

Merged
seonghobae merged 1 commit into
developfrom
agent/ssrf-invalid-type-cross-validator-tests
Aug 12, 2026
Merged

test(security): cover invalid URL types across validators#926
seonghobae merged 1 commit into
developfrom
agent/ssrf-invalid-type-cross-validator-tests

Conversation

@seonghobae

Copy link
Copy Markdown
Contributor

Summary

Lineage

Supersedes the remaining test-only value of #919. Its runtime fix is already implemented on protected develop through #924 and #910; this successor is intentionally based on protected commit 2cc865b182281d72879525f751fa8ba77635794d.

Validation

  • UV_CACHE_DIR=/tmp/uv-cache uv run --with pytest python -m pytest -q tests/test_ssrf_protection.py — 25 passed
  • UV_CACHE_DIR=/tmp/uv-cache uv run --with pytest python -m pytest -q — 977 passed

@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@seonghobae, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 54 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: eedcf83e-1089-48f0-b4b3-2c3a79eae832

📥 Commits

Reviewing files that changed from the base of the PR and between 2cc865b and 6ec61ad.

📒 Files selected for processing (1)
  • tests/test_ssrf_protection.py

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@seonghobae
seonghobae merged commit 7bb59f4 into develop Aug 12, 2026
38 checks passed
@seonghobae
seonghobae deleted the agent/ssrf-invalid-type-cross-validator-tests branch August 12, 2026 07:34
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Security Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant