Files
vercel__chat/apps/docs
josh d8103a103c fix(twilio): restrict authenticated media downloads (#831)
## summary

- validate media URLs against the configured Twilio API origin before
resolving credentials
- reject protocol, hostname, and port mismatches without making a
network request
- preserve support for configured regional Twilio API origins
- document that `apiUrl` defines the trusted origin for media downloads

## test plan

- added API-level coverage for trusted regional origins and untrusted
URL variants
- added adapter-level coverage for rehydrated attachments from untrusted
origins
- ran the Twilio build, tests, typecheck, integration tests, and
formatting checks

Signed-off-by: dancer <josh@afterima.ge>
2026-08-17 21:01:49 +01:00
..
2026-02-20 13:25:09 -08:00
2026-03-24 14:22:44 -07:00
2026-02-16 16:41:54 -08:00
2026-02-16 16:41:54 -08:00