Use hostmacher to replace matchlist. And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection. |
||
|---|---|---|
| .. | ||
| admin | ||
| misc | ||
| notify | ||
| org | ||
| repo | ||
| settings | ||
| swagger | ||
| user | ||
| utils | ||
| api.go | ||