Gitea-John71/Gitea
2
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-08-01 00:08:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
13,530 Commits 22 Branches 257 Tags
7740779b28e53cdf0a9780a39af71e3ee353e170
Commit Graph

3 Commits

Author SHA1 Message Date
wxiaoguang a51efb4c2c Support hostname:port to pass host matcher's check #19543 (#19543) 
hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.
 2022-04-29 01:39:50 +08:00
wxiaoguang 013fb73068 Use hostmatcher to replace matchlist, improve security (#17605) 
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
 2021-11-20 17:34:05 +08:00
wxiaoguang 599ff1c054 Only allow webhook to send requests to allowed hosts (#17482) 2021-11-01 16:39:52 +08:00