feat(security): implement robust IP validation and safeFetch foundation (#21401)

2026-03-18 01:51:20 -07:00 · 2026-03-09 12:02:07 -07:00
parent b68d7bc0f9
commit e92ccec6c8
16 changed files with 612 additions and 27 deletions
--- a/packages/cli/src/utils/gitUtils.ts
+++ b/packages/cli/src/utils/gitUtils.ts
@@ -61,6 +61,7 @@ export const getLatestGitHubRelease = async (

    const endpoint = `https://api.github.com/repos/google-github-actions/run-gemini-cli/releases/latest`;

+    // eslint-disable-next-line no-restricted-syntax -- TODO: Migrate to safeFetch for SSRF protection
    const response = await fetch(endpoint, {
      method: 'GET',
      headers: {