Enhance SSRF protections and input validation in blockchain API#712

Merged

jamespepper81 merged 18 commits into

mainfrom

May 27, 2026

Commits on May 27, 2026

Potential fix for code scanning alert no. 3: Server-side request forgery

jamespepper81
and
github-advanced-security[bot]
authored
Fix SSRF protection bugs: NaN/Infinity in startIndex, percent-encoding in path regex
claude
committed
Harden SSRF protections: route all fetch calls through fetchJson, validate currency and range
claude
committed
Merge pull request #705 from BitSleuthAI/claude/pensive-darwin-qSFOS
jamespepper81
authored
Fix CodeQL SSRF alert: reconstruct fetch URL from trusted constant origins
claude
committed
Merge pull request #706 from BitSleuthAI/claude/upbeat-goldberg-grNwd
jamespepper81
authored
Fix SSRF CodeQL finding: refactor fetchJson to accept structured parameters
claude
committed
Merge pull request #707 from BitSleuthAI/claude/eager-feynman-FTPhH
jamespepper81
authored
Potential fix for code scanning alert no. 1: Workflow does not contain permissions

jamespepper81
and
github-advanced-security[bot]
authored
Potential fix for code scanning alert no. 2: Workflow does not contain permissions

jamespepper81
and
github-advanced-security[bot]
authored
Merge pull request #708 from BitSleuthAI/alert-autofix-1
jamespepper81
authored
Merge pull request #709 from BitSleuthAI/alert-autofix-2
jamespepper81
authored
Fix SSRF alert: add post-construction origin guard in fetchJson
claude
committed
Merge pull request #710 from BitSleuthAI/claude/hopeful-goldberg-ztVt3
jamespepper81
authored
Fix SSRF CodeQL alert: sanitize address/txid inputs before URL construction
claude
committed
Eliminate remaining taint paths in esploraGet for CodeQL compliance
claude
committed
Merge pull request #711 from BitSleuthAI/claude/dreamy-pascal-1SZMO
jamespepper81
authored
Merge pull request #704 from BitSleuthAI/alert-autofix-3
jamespepper81
authored