fix(security): prevent SSRF by validating URL schemes in file content… - #1048

Closed

vinokurig wants to merge 5 commits into

mainfrom

Commits on Sep 1, 2026

fix(security): prevent SSRF by validating URL schemes in file content providers

vinokurig
and
claude
committed
ab85ad4

Commits on Sep 8, 2026

Potential fix for pull request finding 'CodeQL / Server-side request forgery'

vinokurig
and
github-advanced-security[bot]
committed
c3a741e
Merge branch 'main' of github.com:eclipse-che/che-server into CRW-11956
vinokurig
committed
69d2f0f

Commits on Sep 9, 2026

fix(security): send SCM credentials only to the provider's own hosts

vinokurig
and
claude
committed
08d0971
fix(security): validate every SSRF-reachable request target (CWE-918)

vinokurig
and
claude
committed
06c9aac