maochengwei1024-create 77460abc49 fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247) ...

All HTTP clients previously used http.DefaultTransport which silently respects
HTTP_PROXY/HTTPS_PROXY env vars, allowing credentials to transit through
untrusted proxies. This adds a proxy detection warning and an opt-out switch
(LARK_CLI_NO_PROXY=1) so security-sensitive users can disable proxy entirely.

- Redact proxy credentials in warning output (handles both scheme-prefixed and bare URL formats)
- Suppress warning when LARK_CLI_NO_PROXY is already set
- Use FallbackTransport singleton for nil-Base fallback paths to preserve connection pooling
- Emit proxy warning on both HTTP client and Lark SDK client paths

Change-Id: Ibed7d0470409c73fbd42bccac6673f9fc5e87a83

2026-04-03 16:38:04 +08:00

..

auth

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

build

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

client

feat: add --jq flag for filtering JSON output (#211)

2026-04-02 18:36:59 +08:00

cmdutil

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

core

feat: improve OS keychain/DPAPI access error handling for sandbox environments (#173)

2026-04-01 17:58:52 +08:00

httpmock

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

keychain

feat: implement authentication response logging (#235)

2026-04-03 15:40:30 +08:00

lockfile

feat: open-source lark-cli — the official CLI for Lark/Feishu

2026-03-28 10:36:25 +08:00

output

feat: add --jq flag for filtering JSON output (#211)

2026-04-02 18:36:59 +08:00

registry

fix:add approval capability to README (#224)

2026-04-02 20:59:33 +08:00

update

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

util

fix(security): replace http.DefaultTransport with proxy-aware base transport to mitigate MITM risk (#247)

2026-04-03 16:38:04 +08:00

validate

feat: add +download shortcut for minutes media download (#101)

2026-04-02 15:31:13 +08:00