jubnl
e655a7a4e4
fix(ssrf): let .local/.internal hostnames pass to IP-level checks
...
The pre-DNS hostname block was redundant: any .local/.internal host
that resolves to a private IP is already gated by isPrivateNetwork +
ALLOW_INTERNAL_NETWORK, and any that resolves to loopback/link-local
is caught by isAlwaysBlocked unconditionally.
Dropping the hostname pre-check means Docker/LAN deployments can reach
services on .local hostnames (e.g. immich.local) with
ALLOW_INTERNAL_NETWORK=true, while loopback and link-local IPs
(including 169.254.169.254) remain hard-blocked with no override.
Reverts the isAlwaysBlocked guard loosening from 9a08368 .
2026-05-03 16:43:39 +02:00
..
2026-04-28 05:32:35 +02:00
2026-04-20 10:11:53 +02:00
2026-04-27 00:14:50 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-22 18:22:22 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-21 16:57:38 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-28 05:32:35 +02:00
2026-04-20 10:11:53 +02:00
2026-04-21 16:52:38 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-23 19:49:36 +02:00
2026-04-20 10:11:53 +02:00
2026-04-22 18:22:22 +02:00
2026-04-22 19:21:53 +02:00
2026-04-22 19:21:53 +02:00
2026-04-22 19:21:53 +02:00
2026-04-27 00:28:48 +02:00
2026-04-22 19:21:53 +02:00
2026-05-03 16:43:39 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 16:43:53 +02:00
2026-04-23 19:49:36 +02:00
2026-04-20 10:18:44 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 16:43:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-28 05:32:39 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-22 19:21:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-22 19:21:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-22 18:22:22 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-23 20:02:32 +02:00
2026-04-20 10:11:53 +02:00
2026-04-27 00:14:50 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00
2026-04-20 10:11:53 +02:00