Кокос Артем Николаевич a1febd6999 fix: require HTTPS for Redmine URL ...

Config.validate() now rejects REDMINE_URL values whose scheme is not
HTTPS (http://, missing scheme, or any other scheme). The API key is
sent in request headers, so a plain-HTTP endpoint would expose it.
Scheme comparison is case-insensitive per RFC 3986.

Closes #54

2026-07-17 12:48:45 +07:00

16 KiB

Raw Blame History

View Raw