Commit graph

3 commits

Author SHA1 Message Date
wxiaoguang
a51efb4c2c
Support hostname:port to pass host matcher's check ()
hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.
2022-04-29 01:39:50 +08:00
wxiaoguang
013fb73068
Use hostmatcher to replace matchlist, improve security ()
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
2021-11-20 17:34:05 +08:00
wxiaoguang
599ff1c054
Only allow webhook to send requests to allowed hosts () 2021-11-01 16:39:52 +08:00