Commit Graph
6 Commits
Author SHA1 Message Date
Jesse HallamandGitHub 5d787969c2 MM-67268: Fix SSRF bypass via IPv4-mapped IPv6 literals (#35097)
Canonicalize IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1) to
their native IPv4 form in IsReservedIP before checking against reserved
IP ranges. This prevents attackers from bypassing SSRF protections by
using IPv4-mapped IPv6 literals to access internal services.
2026-01-29 14:36:47 +01:00
53809e4500 Improve HTTP service IP and host validation error messages (#33450)
Co-authored-by: Nick Misasi <nick.misasi@mattermost.com>
2025-07-22 14:49:32 +02:00
Ben SchumacherandGitHub 9add320011 [MM-64654] Migrate to modern Go features (#31820) 2025-07-18 12:54:51 +02:00
Claudio CostaandGitHub 8c41ec75db httpservice: improve validation of proxied URLs (#29600) 2024-12-19 17:55:42 +00:00
Agniva De SarkerandGitHub d89ffe269f MM-59026: Update reserved IP ranges (#27751)
https://mattermost.atlassian.net/browse/MM-59026
```release-note
NONE
```
2024-07-25 19:38:56 +05:30
Christopher SpellerandGitHub 04181247f8 Move HTTP service to public for plugin use (#27284)
* Move httpservice for use in plugins

* Adapt httpservice for plugin use

* Fix lint
2024-06-05 09:58:04 -07:00