mirror of
https://github.com/axllent/mailpit.git
synced 2026-06-28 06:56:06 +00:00
3b9b470c09
This fix prevents unrestricted network probing via the screenshot proxy by limiting requests to images, fonts and CSS links found within a message, and returns a generic HTTP error to the client when unsupported content types are requested, not found, or otherwise disallowed. See CWE-918 Server-Side Request Forgery (SSRF)