core
/
gitea
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
12,494 Commits 1 Branch 1 Tag 265 MiB
Commit Graph

2 Commits

Author SHA1 Message Date
wxiaoguang 013fb73068
Use `hostmatcher` to replace `matchlist`, improve security (#17605) 
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
 2021-11-20 17:34:05 +08:00
wxiaoguang 599ff1c054
Only allow webhook to send requests to allowed hosts (#17482) 2021-11-01 16:39:52 +08:00