akitaonrails merged akitaonrails/FrankMD#130 · July 25, 2026 08:57 fix(security): block SSRF in the external-image fetch #130 ProblemPOST /images/upload_external_to_s3 passes the client-supplied URL straight to Net::HTTP with no scheme or address check, so the server can … +203 -2 1 comment