sriram veeraghanta 761c999e0c fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets (#9078) ...

* fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets

The IP-based allowlist alone isn't practical for containerised deployments
where service IPs are dynamic. Adds a hostname-based bypass for trusted
internal services (e.g. Silo via docker-compose / k8s service DNS) and
makes the previously hardcoded ["plane.so"] domain blocklist configurable
via WEBHOOK_DISALLOWED_DOMAINS.

- validate_url accepts allowed_hosts (exact, case-insensitive match;
  skips DNS lookup for trusted names)
- WebhookSerializer wires both settings through and lets allowlisted
  hosts bypass the disallowed-domain check
- Exposes WEBHOOK_ALLOWED_HOSTS in aio/cli deployment env files

* fix: default WEBHOOK_DISALLOWED_DOMAINS to empty for self-hosted

* fix: pass WEBHOOK_ALLOWED_HOSTS to send-time webhook re-validation

2026-05-15 00:57:39 +05:30

..

aio/community

fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets (#9078)

2026-05-15 00:57:39 +05:30

cli/community

fix: add WEBHOOK_ALLOWED_HOSTS allowlist for internal webhook targets (#9078)

2026-05-15 00:57:39 +05:30

kubernetes/community

[INFRA-208] Reorganize deployment structure and update build workflows (#7391)

2025-07-14 14:38:43 +05:30

swarm/community

[INFRA-346] chore: remove artifacts.plane.so references from community deployments (#8836)

2026-03-31 17:56:32 +05:30