[spark-compete] fix: validate previewUrl against private/reserved hosts before fetch - #843

Open

yossweh wants to merge 3 commits into

vibeforge1111:mainfrom

yossweh:fix/ssrf-preview-url-validation

Commits on Jun 18, 2026

fix: validate previewUrl against private/reserved hosts before fetch
0xchunk1
committed
d7bbeee
fix: update form-data to resolve CRLF injection audit
0xchunk1
committed
512786a
fix: replace Tencent mirror URLs with standard npm registry in package-lock.json
0xchunk1
committed
2222453