Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)

2026-08-20 10:34:42 +02:00
parent f0512f1c3c
commit 03cd1859d7
17 changed files with 1244 additions and 61 deletions
--- a/internal/resetpw/resetpw_test.go
+++ b/internal/resetpw/resetpw_test.go
@@ -164,6 +164,7 @@ func newServerApp(
 			func() delivery.Notifier { return &noopNotifier{} },
 			func() delivery.WebhookEvictor { return &noopEvictor{} },
 			middleware.New,
+			delivery.NewGuard,
 			handlers.New,
 		),
 		fx.Populate(&h),