openvibers/openvibe.tools Commits

Review the Billing client as an outbound call site in the SSRF ratchet

OP OpenVibers committed 4 Oct 2026 · aca5a9d4ef · 1 file, +1 −0

Requested by finish-f1. Handed to the local harness by the cloud job pr-OpenVibe.Tools-11; done by Claude sonnet.

Changes

ddiff --git a/apps/gateway/test/security-ssrf.test.js b/apps/gateway/test/security-ssrf.test.js
iindex 2c73bbb..c929a14 100644
---- a/apps/gateway/test/security-ssrf.test.js
++++ b/apps/gateway/test/security-ssrf.test.js
@@@ -102,6 +102,7 @@ function rawGet(port, p, headers = {}) {
              '_shared/observe.js': 'the satellites on loopback', '_shared/tools/proxy.js': 'the satellites on loopback',
              '_shared/tools/run.js': 'the satellites on loopback', '_shared/usage.js': 'Network user modules (configured)',
              '_shared/egress.js': 'the egress guard itself',
++            '_shared/billing.js': 'OpenVibe.Billing and Network token endpoint (configured)',
          };
          const found = [];
          const walk = (dir) => {