sriram veeraghanta 41b03bb142 Merge commit from fork ...

The webhook dispatcher validated webhook.url before posting but called
requests.post() without allow_redirects=False, so a webhook destination
could return a 3xx redirect to an internal address (cloud metadata,
internal services) and have the worker fetch it and persist the
response body to webhook_logs, readable back via the webhook-logs API.

Pass allow_redirects=False so the original validate_url() guard is
authoritative. Matches the pattern already used by safe_get() in
work_item_link_task.py and the behavior of GitHub/Stripe/Slack webhooks.

2026-05-25 13:59:04 +05:30

..

admin

Merge branch 'canary' of github.com:makeplane/plane into preview

2026-05-15 01:06:45 +05:30

api

Merge commit from fork

2026-05-25 13:59:04 +05:30

live

fix: pnpm path for Docker builds (#9079)

2026-05-15 01:05:14 +05:30

proxy

Merge branch 'canary' of github.com:makeplane/plane into preview

2025-12-12 13:42:48 +05:30

space

Merge branch 'canary' of github.com:makeplane/plane into preview

2026-05-15 01:06:45 +05:30

web

fix(web): add requestIdleCallback fallback for Safari/iOS (#9094)

2026-05-25 01:01:11 +05:30