YeonGyu-Kim 682a3c8515 fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks ...

- Restrict HTTP hook URLs to http: and https: schemes only (blocks file://, data://, ftp://)
- Extend hook disable config to cover HTTP hooks by matching against hook URL identifier
- Update all 5 hook executors (pre-tool-use, post-tool-use, stop, pre-compact, user-prompt-submit)
- Add 6 new tests for URL scheme validation (file, data, ftp rejection + http, https, invalid URL)

2026-03-02 15:20:31 +09:00

..

handlers

fix(copilot): mark internal hook injections as agent-initiated

2026-02-19 13:17:02 +02:00

AGENTS.md

docs(agents): update hook counts 44→46, add hashline-edit documentation

2026-02-25 00:02:05 +09:00

claude-code-hooks-hook.ts

refactor(claude-code-hooks): extract handlers and session state

2026-02-08 16:22:17 +09:00

config-loader.ts

fix: respect OPENCODE_CONFIG_DIR environment variable across all config paths

2026-01-22 12:15:09 +07:00

config.ts

feat(hooks): add HTTP hook handler support

2026-02-28 11:38:34 +09:00

dispatch-hook.ts

feat(hooks): add HTTP hook handler support

2026-02-28 11:38:34 +09:00

execute-http-hook.test.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

execute-http-hook.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

index.ts

refactor: wave 2 - split atlas, auto-update-checker, session-recovery, todo-enforcer, background-task hooks

2026-02-08 15:01:42 +09:00

plugin-config.ts

fix: Improve Windows compatibility for paths and shell config

2025-12-16 01:02:49 +09:00

post-tool-use.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

pre-compact.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

pre-tool-use.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

session-hook-state.ts

refactor(claude-code-hooks): extract handlers and session state

2026-02-08 16:22:17 +09:00

stop.test.ts

fix: execute all Stop hooks instead of returning after first non-blocking result

2026-02-12 16:09:13 +09:00

stop.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00

todo.ts

fix: honor CLAUDE_CONFIG_DIR environment variable (#261)

2025-12-26 23:28:33 +09:00

tool-input-cache.ts

fix: reduce session.messages() calls with event-based caching to prevent memory leaks

2026-02-12 11:38:11 +09:00

transcript.test.ts

fix: reduce session.messages() calls with event-based caching to prevent memory leaks

2026-02-12 11:38:11 +09:00

transcript.ts

fix: reduce session.messages() calls with event-based caching to prevent memory leaks

2026-02-12 11:38:11 +09:00

types.ts

feat(hooks): add HTTP hook handler support

2026-02-28 11:38:34 +09:00

user-prompt-submit.test.ts

fix(hooks): fire UserPromptSubmitHooks on every prompt, not just first (#594)

2026-02-07 20:03:52 +09:00

user-prompt-submit.ts

fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks

2026-03-02 15:20:31 +09:00