Security
- Disallow the media proxy from fetching resources on private networks to mitigate potential SSRF issues. This behavior is configurable at the instance level.
- Disallow fetching feed icons from private networks to reduce the SSRF attack surface. This is also configurable at the instance level.
- Add the
TRUSTED_REVERSE_PROXY_NETWORKSconfiguration option to prevent spoofing of...