5 Commits

Include renames

Author	SHA1	Message	Date
vasyanskandClaude Opus 4.8	504c4c081f	fix(phase3): skip templateless domains in scheduler; block CGNAT range in webhook SSRF guard ... Domains imported without a template (TemplateID == nil) are a valid, unconfigured state, not a failure — RunOnce now skips them before calling checkDomain instead of letting LoadDomain's "no template" error turn into StatusError and a spammy unknown->error notification. isBlockedIP now also rejects 100.64.0.0/10 (RFC 6598 carrier-grade NAT), which net.IP.IsPrivate() does not cover, closing an SSRF gap in the webhook destination guard (both the pre-request check and the per-dial check use isBlockedIP). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BwxdSt4reTm7Dj1oxRvpP3	2026-07-04 14:58:09 +07:00
vasyansk	b31f886ae2	feat(server): запуск планировщика, /metrics, graceful shutdown	2026-07-04 14:14:00 +07:00
vasyansk	070a32717f	fix(sec): webhook SSRF-guard через Dialer.Control (закрытие DNS-rebinding TOCTOU)	2026-07-04 13:48:22 +07:00
vasyansk	29f448d4b5	fix(sec): санитизация Telegram-ошибок, SSRF-guard Webhook, чистка логов test-канала, go mod tidy, histogram-бакеты	2026-07-04 13:40:29 +07:00
vasyansk	e82fb0b13d	feat(notify): Telegram/Webhook нотификаторы + Dispatcher по каналам проекта	2026-07-04 13:19:21 +07:00