Rosa Gutierrez a7e9ea53dd Don't let an http_proxy environment variable bypass the pinned address in link previews ...

Opengraph::Fetch connects to the IP it checked, not to a fresh lookup of
the host. With http_proxy set, Net::HTTP would instead send the hostname
to the proxy, which looks it up again, so the connection could end up
somewhere other than the checked address. Pass nil as the proxy address,
as web push delivery already does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 16:45:43 +02:00

..

assets

Keep the message body list styles out of the mention menu

2026-09-26 11:16:03 +02:00

channels

Keep same-second unread events and bound idle push connections

2026-10-07 11:00:47 +02:00

controllers

Keep transaction guards temporary and simplify quick boost forms

2026-10-08 12:40:31 +02:00

helpers

Retain content-validated message fragments across unrelated commits

2026-10-08 12:00:45 +02:00

javascript

Use header-only forgery protection and cache complete responses

2026-10-08 09:05:10 +02:00

jobs

Merge pull request #329: Delete a room's messages in a job, one transaction each

2026-10-07 10:33:57 +02:00

models

Don't let an http_proxy environment variable bypass the pinned address in link previews

2026-10-09 16:45:43 +02:00

views

Keep transaction guards temporary and simplify quick boost forms

2026-10-08 12:40:31 +02:00