Search results

PR duplication is recurring — #119 and #120 both fix #118, unreviewed for 1-2 days (repeat of #102)

process

Status: Open.

#121 In HailBytes/security-headers;

· dmchaledev opened on Jul 26, 2026

Multiple Content-Security-Policy headers get coalesced by fetch(), silently hiding real misconfigurations (false "good" grade)

bugSomething isn't workingSomething isn't working

security

Status: Open.

#117 In HailBytes/security-headers;

· dmchaledev opened on Jul 22, 2026

SSRF fix in fetch.ts is bypassable via DNS rebinding — validated IP is never pinned to the actual connection

Status: Open.

#116 In HailBytes/security-headers;

· dmchaledev opened on Jul 21, 2026