fix(security): SSRF fixes - #4548

Merged

waleedlatif1 merged 5 commits into

fix/security-ssrf-token-leaks

May 11, 2026

Commits on May 10, 2026

fix: address SSRF and token-leakage security vulnerabilities
waleedlatif1
committed
171a4c4
fix(wealthbox): correct getUserInfo endpoint, auth header, and stable identity
waleedlatif1
committed
d3bd321

Commits on May 11, 2026

fix(security): hash wealthbox fallback token identity, guard undefined userId
waleedlatif1
committed
b2e9f57
fix(auth): replace stale wealthbox userInfoUrl placeholder with actual endpoint
waleedlatif1
committed
c90c3f2
fix(auth): append generateId() suffix to Wealthbox account IDs to match codebase pattern
waleedlatif1
committed
13275e9