chatwoot

6,111 Commits 679 Branches 152 Tags

1 Commits

Include renames

Author	SHA1	Message	Date
Sony MathewandGitHub	c8e551820b	fix: [CW-6940] Fix SSRF issue for webhook trigger used by macros and automations (#14155 ) This routes external downloads used by webhook fetch used by macros and acutomations through SafeFetch. It closes the SSRF exposure from raw Down.download paths, preserves provider-specific auth and header flows, and adds regression coverage for blocked internal URLs plus authenticated downloads. Fixes # (issue): [CW-6940](https://linear.app/chatwoot/issue/CW-6940/ssrf-via-webhooksautomationmacros-non-upload-non-avatar)	2026-04-27 20:30:59 +05:30

Author

SHA1

Message

Date

Sony MathewandGitHub

c8e551820b

fix: [CW-6940] Fix SSRF issue for webhook trigger used by macros and automations (#14155 )

This routes external downloads used by webhook fetch used by macros and
acutomations through SafeFetch. It closes the SSRF exposure from raw
Down.download paths, preserves provider-specific auth and header flows,
and adds regression coverage for blocked internal URLs plus
authenticated downloads.

Fixes # (issue):
[CW-6940](https://linear.app/chatwoot/issue/CW-6940/ssrf-via-webhooksautomationmacros-non-upload-non-avatar)

2026-04-27 20:30:59 +05:30