decoluaandCursor 8ac631d615 fix(ssrf): block IPv6-mapped IPv4 addresses (GHSA-hj98-rc6w-m8cw) ...

isBlockedIpv6() did not normalize ::ffff:<ipv4>, allowing the SSRF
filter to be bypassed. Extract and validate via isBlockedIpv4().

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-26 12:14:30 +07:00

..

api.js

chore: fix build warnings, add deployment config, and cleanup lint errors

2026-01-20 12:58:51 +07:00

apiKey.js

Initial commit

2026-01-05 09:58:59 +07:00

clineAuth.js

refactor(open-sse): remove reverse coupling open-sse -> src (E2)

2026-06-13 16:35:07 +07:00

cn.js

Initial commit

2026-01-05 09:58:59 +07:00

connectionStatus.js

refactor(app): DRY pass — split large files, extract shared utils

2026-06-14 19:31:09 +07:00

index.js

feat(cli-tools): update CLI tools and add new models

2026-02-06 20:53:20 +07:00

machine.js

chore: add buildOutput RTK filter, drop legacy cloud sync, internal cleanup

2026-05-16 10:54:41 +07:00

machineId.js

Fix tunnel

2026-05-21 11:33:18 +07:00

providerCustomModels.js

fix(models): store provider custom models by provider scope

2026-06-20 15:19:22 +07:00

providerModelsFetcher.js

Refactor error handling to config-driven approach with centralized error rules

2026-04-15 11:46:47 +07:00

ssrfGuard.js

fix(ssrf): block IPv6-mapped IPv4 addresses (GHSA-hj98-rc6w-m8cw)

2026-06-26 12:14:30 +07:00