pravit-ampandPravit Ampapathini ab5c12f9af fix(ingest): SSRF protection for Web and API ingestors (#867) (#906) ...

* fix(ingest): add SSRF protection for WebIngestor and RESTIngestor

Block non-http(s) schemes and private/loopback/link-local targets before
outbound requests, with allow_private_ips opt-in for trusted deployments.

* fix(ingest): fail closed on SSRF DNS resolution errors

* fix(ingest): validate SSRF targets on every HTTP redirect hop

* fix(ingest): avoid blocking on SSRF DNS executor shutdown

* fix(ingest): parse allow_private_ips without truthy-string pitfalls

* docs(ingest): clarify robots.txt SSRF/validation comment

---------

Co-authored-by: Pravit Ampapathini

2026-08-11 13:52:15 +05:00

..

__init__.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_arrow_ingestor.py

feat: implement Apache Arrow and Feather file ingestion support (#235)

2026-06-24 22:37:00 +05:30

test_cookbook_integration.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_feed_ingestor.py

test(ingest): add unit tests for file, web, and feed ingestors

2026-01-27 18:53:05 +02:00

test_file_ingestor.py

test(ingest): mock boto3 client in tests; fix FeedParser._parse_date to raise ValueError on invalid input

2026-01-28 14:13:15 +05:30

test_ingest_from_csv().py

Finalize CSV tests after conflict resolution

2026-01-29 00:32:07 +05:30

test_ingestors.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebook_02.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebook_06.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_ontology_ingestor.py

feat(ontology): Implement OntologyIngestor and update exports

2026-01-21 13:46:46 +05:30

test_optional_imports.py

fix(ingest): harden public API xml parsing

2026-06-09 14:10:40 +05:30

test_parquet_ingestor.py

Added Parquet ingest support (#234) (#548)

2026-05-10 12:52:26 +05:30

test_public_api_ingestor.py

fix(ingest): harden public API auth validation

2026-06-10 12:47:36 +05:30

test_ssrf_protection.py

fix(ingest): SSRF protection for Web and API ingestors (#867) (#906)

2026-08-11 13:52:15 +05:00

test_submodules.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_web_ingestor.py

fix(security): resolve CodeQL alerts for logging, URL sanitization, and workflow permissions

2026-03-30 19:46:30 +05:30

test_xml_ingestor.py

Add XML file ingestion support (#560)

2026-05-19 17:48:32 +05:30