maochengwei1024-create 77460abc49 fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247) ...

All HTTP clients previously used http.DefaultTransport which silently respects
HTTP_PROXY/HTTPS_PROXY env vars, allowing credentials to transit through
untrusted proxies. This adds a proxy detection warning and an opt-out switch
(LARK_CLI_NO_PROXY=1) so security-sensitive users can disable proxy entirely.

- Redact proxy credentials in warning output (handles both scheme-prefixed and bare URL formats)
- Suppress warning when LARK_CLI_NO_PROXY is already set
- Use FallbackTransport singleton for nil-Base fallback paths to preserve connection pooling
- Emit proxy warning on both HTTP client and Lark SDK client paths

Change-Id: Ibed7d0470409c73fbd42bccac6673f9fc5e87a83

2026-04-03 16:38:04 +08:00

..

json.go

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

proxy_test.go

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

proxy.go

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

reflect_test.go

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

reflect.go

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

strings.go

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00