 Frédéric Guillot
|
4cd9dd6af7
refactor(validator): replace IsValidURL with urllib.IsAbsoluteURL
|
2 maanden geleden |
|
Frédéric Guillot
|
c166f80b58
fix: block RFC 6598 shared address space as non-public
|
2 maanden geleden |
|
Frédéric Guillot
|
fe2bfb27cf
fix(fetcher): avoid possible SSRF TOCTOU/DNS-rebinding in private network check
|
2 maanden geleden |
|
Frédéric Guillot
|
f9b756ecf8
feat: add SSRF protection for integration HTTP clients
|
2 maanden geleden |
 Frédéric Guillot
|
bb05b25530
refactor(urllib): replace AbsoluteURL and GetAbsoluteURL
|
4 maanden geleden |
|
Frédéric Guillot
|
6c83e8c477
feat(mediaproxy): disallow the media proxy to fetch resources on private networks
|
4 maanden geleden |
|
Frédéric Guillot
|
76df99f3a3
fix: only relative path should allowed for redirectURL parameter
|
7 maanden geleden |
|
Frédéric Guillot
|
e5d9f2f5a0
Rename internal url package to avoid overlap with net/url
|
2 jaren geleden |
