2 Commits (b24a965b81d5aa4e7bd87c6a4c6370d7e0ec9a50)

Author SHA1 Message Date
wxiaoguang 013fb73068
Use `hostmatcher` to replace `matchlist`, improve security (#17605)
Use hostmacher to replace matchlist.

And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
3 years ago
wxiaoguang 599ff1c054
Only allow webhook to send requests to allowed hosts (#17482) 3 years ago