Commit Graph

5 Commits (a4403e4e80092c83a9e0cdb371192deeb4905ea7)

Author SHA1 Message Date
wxiaoguang a51efb4c2c
Support `hostname:port` to pass host matcher's check ()
hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.
6543 60fbaa9068
remove not needed ()
Gusted ff2fd08228
Simplify parameter types ()
Remove repeated type declarations in function definitions.
wxiaoguang 013fb73068
Use `hostmatcher` to replace `matchlist`, improve security ()
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
wxiaoguang 599ff1c054
Only allow webhook to send requests to allowed hosts ()