Skip to content

v2.0.12

Latest
Latest

Choose a tag to compare

View all tags
@yukimochi yukimochi released this 16 Oct 16:34
v2.0.12
5c6325a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This update has minor security update

What's Changed

Breaking changes

fix: blind SSRF in outbound ActivityPub requests

To protect form blind SSRF for your local networks, Activity-Relay not allow establish connection to local network.

New Configration

If your environment needs additional protected for any IP ranges, Use OUTBOUND_BLOCKED_CIDRS.

Discrimer

  • Currently disabling protection is not implement.
  • NAT64/6to4 IP address are not allowed to establish connection.
  • HTTP_PROXY environment variable and HTTP Proxy is not work anymore.

Minor changes

  • chore: update dependencies
  • improve redis access (avoid race conditions)
  • fix some code may cause crashes
Assets 2
Loading