Ralph Slooten 10ad4df8cc Security: Prevent Server-Side Request Forgery (SSRF) via Link Check API ([GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3)) ...

By default all internal HTTP requests are now blocked, unless mailpit is started with the `--allow-internal-http-requests` flag (env  `MP_ALLOW_INTERNAL_HTTP_REQUESTS=true`).

2026-02-24 14:22:02 +13:00

..

config.go

Security: Prevent Server-Side Request Forgery (SSRF) via Link Check API ([GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3))

2026-02-24 14:22:02 +13:00

tags.go

Chore: Switch yaml parser to github.com/goccy/go-yaml

2025-05-17 22:40:11 +12:00

utils.go

Chore: Refactor error handling and resource management across multiple files (golangci-lint)

2025-06-22 15:25:21 +12:00

validators.go

Chore: Switch yaml parser to github.com/goccy/go-yaml

2025-05-17 22:40:11 +12:00