mirror of
https://github.com/penpot/penpot.git
synced 2026-08-06 21:08:34 +00:00
Remove :skip-ssrf-check? true from prepare-organization-sso-provider so SSRF protection is active when validating organization SSO configs. The endpoint is already protected by shared-key authentication (admin-console), but enabling SSRF protection prevents potential misuse of internal network resources if the shared key were ever compromised (defense-in-depth). Add test prepare-organization-sso-provider-does-not-skip-ssrf-check to verify the SSRF check is not skipped. AI-assisted-by: qwen3.7-plus