feat(security): implement robust IP validation and safeFetch foundation (#21401)

2026-04-14 15:21:01 -07:00 · 2026-03-09 12:02:07 -07:00
parent b68d7bc0f9
commit e92ccec6c8
16 changed files with 612 additions and 27 deletions
--- a/packages/core/src/code_assist/oauth2.ts
+++ b/packages/core/src/code_assist/oauth2.ts
@@ -700,6 +700,7 @@ async function fetchAndCacheUserInfo(client: OAuth2Client): Promise<void> {
      return;
    }

+    // eslint-disable-next-line no-restricted-syntax -- TODO: Migrate to safeFetch for SSRF protection
    const response = await fetch(
      'https://www.googleapis.com/oauth2/v2/userinfo',
      {