traefikoidc

lukaszraczylo/traefikoidc

Fork 0

mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-11-04 07:53:59 +00:00

Commit Graph

Author	SHA1	Message	Date
lukaszraczylo	78db86b455	fix(security): treat trailing-dot hosts as their blocked names validateHost and isLoopbackHost matched hostnames by exact string. The spellings localhost. and metadata.google.internal. passed the SSRF check. The check now drops the root dot and any IPv6 zone id first. A bare IPv6 literal without a port no longer fails the host check.	2026-11-03 00:42:00 +00:00

Author

SHA1

Message

Date

lukaszraczylo

78db86b455

fix(security): treat trailing-dot hosts as their blocked names

validateHost and isLoopbackHost matched hostnames by exact string. The
spellings localhost. and metadata.google.internal. passed the SSRF
check. The check now drops the root dot and any IPv6 zone id first.
A bare IPv6 literal without a port no longer fails the host check.

2026-11-03 00:42:00 +00:00