Improve security

2026-03-07 15:34:23 +00:00
parent add685a326
commit 611de57bf8
31 changed files with 3617 additions and 58 deletions
--- a/core/tests/test_attachment_security.py
+++ b/core/tests/test_attachment_security.py
@@ -24,6 +24,7 @@ class AttachmentSecurityTests(SimpleTestCase):
                size=32,
            )

+    @override_settings(ATTACHMENT_ALLOW_PRIVATE_URLS=False)
    def test_blocks_private_url_by_default(self):
        with self.assertRaises(ValueError):
            validate_attachment_url("http://localhost/internal")