mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2024-12-22 16:47:30 +00:00
Add proxy host into allow list (#20798)
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
This commit is contained in:
parent
1e0fcd1450
commit
a4e91c4197
|
@ -78,6 +78,11 @@ func (hl *HostMatchList) AppendBuiltin(builtin string) {
|
||||||
hl.builtins = append(hl.builtins, builtin)
|
hl.builtins = append(hl.builtins, builtin)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// AppendPattern appends more pattern to match
|
||||||
|
func (hl *HostMatchList) AppendPattern(pattern string) {
|
||||||
|
hl.patterns = append(hl.patterns, pattern)
|
||||||
|
}
|
||||||
|
|
||||||
// IsEmpty checks if the checklist is empty
|
// IsEmpty checks if the checklist is empty
|
||||||
func (hl *HostMatchList) IsEmpty() bool {
|
func (hl *HostMatchList) IsEmpty() bool {
|
||||||
return hl == nil || (len(hl.builtins) == 0 && len(hl.patterns) == 0 && len(hl.ipNets) == 0)
|
return hl == nil || (len(hl.builtins) == 0 && len(hl.patterns) == 0 && len(hl.ipNets) == 0)
|
||||||
|
|
|
@ -479,5 +479,10 @@ func Init() error {
|
||||||
}
|
}
|
||||||
// TODO: at the moment, if ALLOW_LOCALNETWORKS=false, ALLOWED_DOMAINS=domain.com, and domain.com has IP 127.0.0.1, then it's still allowed.
|
// TODO: at the moment, if ALLOW_LOCALNETWORKS=false, ALLOWED_DOMAINS=domain.com, and domain.com has IP 127.0.0.1, then it's still allowed.
|
||||||
// if we want to block such case, the private&loopback should be added to the blockList when ALLOW_LOCALNETWORKS=false
|
// if we want to block such case, the private&loopback should be added to the blockList when ALLOW_LOCALNETWORKS=false
|
||||||
|
|
||||||
|
if setting.Proxy.Enabled && setting.Proxy.ProxyURLFixed != nil {
|
||||||
|
allowList.AppendPattern(setting.Proxy.ProxyURLFixed.Host)
|
||||||
|
}
|
||||||
|
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue