Performance History
Latest Results
Fall back across validated IPs in SSRF-protected backends
Previously the protected backends pinned a single resolved IP, which
broke dual-stack hostnames in single-stack environments: if the first
resolved address was unreachable (e.g. AAAA in an IPv4-only network)
the connection would fail even when a later A/AAAA record was
reachable. Now iterate every validated IP, retry on ConnectError /
ConnectTimeout / OSError, and re-raise the last error only if all
addresses fail.
Addresses the Codex P1 review comment on #21591.
Co-authored-by: Alexander Streed <alex.s@prefect.io>
Co-Authored-By: alex.s <ajstreed1@gmail.com>
devin1/oss-7874-fix-dns-rebinding-toctou-bypass-in-validate_restricted_url
14 hours ago
Fix rich artifact sandbox escape and raw data display
Strip allow-same-origin from iframe sandbox when allow-scripts is also
present to prevent embedded JS from escaping the sandbox. Serialize
object-valued artifact data as JSON for the raw data panel and copy
button.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
bd/feat/10958-rich-html-iframe-artifacts
14 hours ago
Latest Branches
-3%
14 hours ago
a080abd
devin1/oss-7874-fix-dns-rebinding-toctou-bypass-in-validate_restricted_url
0%
17 days ago
5a0675d
bd/feat/10958-rich-html-iframe-artifacts
0%
2 days ago
85018d5
ubiquitousbyte:fix/deployment-concurrency-lease-release