github-forks
/
gitea
mirror of https://github.com/go-gitea/gitea.git
1
0
Fork 0
Code Projects Releases Activity
13,994 Commits
17 Branches
225 Tags
763 MiB
Commit Graph

7 Commits (cad9adeff41595ea32281dbc2918e653c3e3a839)

Author SHA1 Message Date
Lunny Xiao a4e91c4197
Add proxy host into allow list () 
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
wxiaoguang f67a1030b3
Add tests for the host checking logic, clarify the behaviors () 
Before, the combination of AllowedDomains/BlockedDomains/AllowLocalNetworks is confusing.

This PR adds tests for the logic, clarify the behaviors.
wxiaoguang a51efb4c2c
Support `hostname:port` to pass host matcher's check () 
hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.
6543 60fbaa9068
remove not needed ()
Gusted ff2fd08228
Simplify parameter types () 
Remove repeated type declarations in function definitions.
wxiaoguang 013fb73068
Use `hostmatcher` to replace `matchlist`, improve security () 
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
wxiaoguang 599ff1c054
Only allow webhook to send requests to allowed hosts ()