a6e783adc4
fix(test): improve execute-http-hook-security test isolation
...
Reset mocks and process.env copy in afterEach to prevent cross-test
contamination from mock.module() isolation.
2026-04-04 16:48:12 +09:00
b8f4037622
Refine HTTP hook redirect enforcement
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:30:57 +09:00
d081e8ef4f
Fix HTTP hook HTTPS enforcement gaps
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:11:09 +09:00
f84d311c64
Revert "Merge pull request #3048 from code-yeongyu/fix/p0-2-https-enforcement-gaps"
...
This reverts commit ede561cb742d13e125bb
2026-04-03 17:10:23 +09:00
3eb1430a43
Fix HTTP hook HTTPS enforcement gaps
...
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent )
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai >
2026-04-03 17:07:17 +09:00
5a2814980e
fix(security): enforce HTTPS for HTTP hook URLs
...
Add TLS requirement for HTTP hook destinations:
- Warn when plain http:// URLs are used
- Reject remote http:// in production mode
- Allow http://localhost and http://127.0.0.1 for dev
Prevents secret exfiltration over unencrypted channels.
2026-04-02 15:01:15 +09:00
YeonGyu-Kim