5 Commits (abb7d4ae5d1bb96e89a87de475a0453ce85f6404)

Author SHA1 Message Date
wxiaoguang a51efb4c2c
Support `hostname:port` to pass host matcher's check #19543 (#19543)
hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.
2 years ago
6543 60fbaa9068
remove not needed (#19128) 2 years ago
Gusted ff2fd08228
Simplify parameter types (#18006)
Remove repeated type declarations in function definitions.
3 years ago
wxiaoguang 013fb73068
Use `hostmatcher` to replace `matchlist`, improve security (#17605)
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
3 years ago
wxiaoguang 599ff1c054
Only allow webhook to send requests to allowed hosts (#17482) 3 years ago