gitlab-ce

Commit Graph

Author	SHA1	Message	Date
George Koltsov	e5e1c907c0	Add outbound requests setting for system hooks This MR adds new application setting to network section `allow_local_requests_from_system_hooks`. Prior to this change system hooks were allowed to do local network requests by default and we are adding an ability for admins to control it.	2019-08-02 15:39:18 +01:00
Oswaldo Ferreira	a1a0f8e6b0	Add DNS rebinding protection settings	2019-05-30 10:47:57 -03:00
Douwe Maan	a9bcddee4c	Protect Gitlab::HTTP against DNS rebinding attack Gitlab::HTTP now resolves the hostname only once, verifies the IP is not blocked, and then uses the same IP to perform the actual request, while passing the original hostname in the `Host` header and SSL SNI field.	2019-05-30 10:47:31 -03:00

Author

SHA1

Message

Date

George Koltsov

e5e1c907c0

Add outbound requests setting for system hooks

This MR adds new application setting to network section
`allow_local_requests_from_system_hooks`. Prior to this change
system hooks were allowed to do local network requests by default
and we are adding an ability for admins to control it.

2019-08-02 15:39:18 +01:00

Oswaldo Ferreira

a1a0f8e6b0

Add DNS rebinding protection settings

2019-05-30 10:47:57 -03:00

Douwe Maan

a9bcddee4c

Protect Gitlab::HTTP against DNS rebinding attack

Gitlab::HTTP now resolves the hostname only once, verifies the IP is not
blocked, and then uses the same IP to perform the actual request, while
passing the original hostname in the `Host` header and SSL SNI field.

2019-05-30 10:47:31 -03:00

3 Commits