fix(security): enforce URL validation across connectors, providers, and auth flows (SSRF + open-redirect hardening)#4236

Merged

waleedlatif1 merged 6 commits intostagingfrom

waleedlatif1/workday-ssrf-fix

Apr 20, 2026

Commits on Apr 20, 2026

fix(workday): validate tenantUrl to prevent SSRF in SOAP client
waleedlatif1
committed
fix(workday): use validation.sanitized in buildWsdlUrl
waleedlatif1
committed
fix(security): enforce URL validation across connectors, providers, auth
waleedlatif1
committed
fix(obsidian): use isomorphic SSRF validation to unblock client build
waleedlatif1
committed
fix(servicenow): propagate URL validation errors in getDocument

waleedlatif1
and
claude
committed
fix(obsidian): drop allowHttp to restore HTTPS enforcement in hosted mode

waleedlatif1
and
claude
committed