6 Commits

Author	SHA1	Message	Date
Andrii Furmanets	c0cd5a7265	Net: strip sensitive headers on cross-origin redirects	2026-02-19 11:42:25 -08:00
Marcus Castro	7ec60d6449	fix: use relayAbort helper for addEventListener to preserve AbortError reason	2026-02-13 18:13:18 +01:00
Marcus Castro	d9c582627c	perf: use .abort.bind() instead of arrow closures to prevent memory leaks (#7174)	2026-02-13 18:13:18 +01:00
Peter Steinberger	99f28031e5	fix: harden OpenResponses URL input fetching	2026-02-13 01:38:49 +01:00
Peter Steinberger	9bd64c8a1f	fix: expand SSRF guard coverage	2026-02-02 04:58:32 -08:00
Peter Steinberger	81c68f582d	fix: guard remote media fetches with SSRF checks	2026-02-02 04:07:29 -08:00