Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update ip IsInternal() to account for missed ranges #827

Merged
merged 2 commits into from Jul 18, 2020
Merged

Conversation

kspearrin
Copy link
Member

Report from HackerOne pointed out a few more ranges, including IPv6, that we are missing on our IsInternal check to prevent SSRF attacks.

@kspearrin kspearrin requested a review from a team July 17, 2020 15:51
cscharf
cscharf previously approved these changes Jul 17, 2020
Copy link
Contributor

@cscharf cscharf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, waiting on review/final comments from polict of Shielder.

@kspearrin kspearrin merged commit 036b402 into master Jul 18, 2020
@kspearrin kspearrin deleted the ipfix branch July 18, 2020 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants