Trenton H d78754bff1 Security: validate remote OCR endpoint against internal SSRF (#13897) ...

* Security: validate remote OCR endpoint against internal SSRF

Adds PAPERLESS_REMOTE_OCR_ALLOW_INTERNAL_ENDPOINTS (default true)
and validates remote_ocr_endpoint via validate_outbound_http_url
on the config serializer, matching the existing LLM endpoint handling.

* Validates te outbound url again right before use

* cover empty-value branch of validate_remote_ocr_endpoint because coverage

* re-validate remote OCR endpoint on every outbound request

2026-09-01 20:22:10 +00:00

..

assets

…

administration.md

…

advanced_usage.md

…

api.md

…

changelog.md

Documentation: Add v3.1.2 changelog (#13890)

2026-09-01 08:33:32 -07:00

configuration.md

Security: validate remote OCR endpoint against internal SSRF (#13897)

2026-09-01 20:22:10 +00:00

development.md

…

faq.md

…

index.md

…

migration-v3.md

…

setup.md

…

troubleshooting.md

…

usage.md

…