From c9ba718777ca20a7ee059c9fddf4ccdfdd2fc00c Mon Sep 17 00:00:00 2001 From: 4gray Date: Fri, 12 Jun 2026 19:55:44 +0200 Subject: [PATCH] fix: remove duplicate Xtream probe comment --- apps/electron-backend/src/app/events/xtream.events.ts | 2 -- 1 file changed, 2 deletions(-) diff --git a/apps/electron-backend/src/app/events/xtream.events.ts b/apps/electron-backend/src/app/events/xtream.events.ts index cf95d162a..e8ef3d09e 100644 --- a/apps/electron-backend/src/app/events/xtream.events.ts +++ b/apps/electron-backend/src/app/events/xtream.events.ts @@ -279,8 +279,6 @@ ipcMain.handle( // for self-hosted setups. Redirects stay disabled below so a validated // URL cannot bounce to a different private target. try { - // Private/LAN targets are allowed (users probe self-hosted Xtream - // servers); maxRedirects:0 below blocks redirect-based SSRF. await assertRemoteUrlAllowed(payload.url, { allowPrivateNetworks: true, });