fix(security): SSRF pinning, Twilio webhook auth, copilot token leak, audit-log tenant scoping by waleedlatif1 · Pull Request #4899 · simstudioai/sim

fix(clickhouse): pin outbound HTTP connection to validated IP (DNS rebinding)

waleedlatif1

committed

c66a882

fix(mcp): pin auth-type probe to validated IP to close SSRF/DNS-rebinding window

waleedlatif1

committed

37373b8

fix(security): stop returning plaintext OAuth access tokens from copilot credentials

waleedlatif1

committed

e64b703

fix(webhooks): verify X-Twilio-Signature on Twilio SMS webhooks

waleedlatif1

committed

5e067b2

fix(connectors): route user-controlled connector hosts through DNS-validated, IP-pinned fetch

waleedlatif1

committed

715e672

fix(audit-logs): scope enterprise audit log access to organization boundary

waleedlatif1

committed

0f7bf96

fix(webhooks): warn when Twilio webhook has no auth token configured

waleedlatif1

committed

720b203

fix(audit-logs): include system events (null actor) in default org audit scope

waleedlatif1

committed

4427bb5

fix(auth): type-safe access to OAuth2Tokens raw payload

waleedlatif1

committed

4a7c354

fix(build): keep connector SSRF fetch out of the client bundle

waleedlatif1

committed

69b3857

Navigation Menu

Repository navigation

fix(security): SSRF pinning, Twilio webhook auth, copilot token leak, audit-log tenant scoping - #4899

fix(security): SSRF pinning, Twilio webhook auth, copilot token leak, audit-log tenant scoping#4899
waleedlatif1 merged 10 commits into
stagingfrom
fix/sec-t

Commits on Jun 6, 2026

fix(clickhouse): pin outbound HTTP connection to validated IP (DNS rebinding)

fix(mcp): pin auth-type probe to validated IP to close SSRF/DNS-rebinding window

fix(security): stop returning plaintext OAuth access tokens from copilot credentials

fix(webhooks): verify X-Twilio-Signature on Twilio SMS webhooks

fix(connectors): route user-controlled connector hosts through DNS-validated, IP-pinned fetch

fix(audit-logs): scope enterprise audit log access to organization boundary

fix(webhooks): warn when Twilio webhook has no auth token configured

fix(audit-logs): include system events (null actor) in default org audit scope

fix(auth): type-safe access to OAuth2Tokens raw payload

fix(build): keep connector SSRF fetch out of the client bundle