Skip to content

feat: simplify SSRF protection#86

Merged
Fleeym merged 6 commits into
mainfrom
ssrf-part-2
Jul 23, 2026
Merged

feat: simplify SSRF protection#86
Fleeym merged 6 commits into
mainfrom
ssrf-part-2

Conversation

@Fleeym

@Fleeym Fleeym commented Jul 22, 2026

Copy link
Copy Markdown
Member

First implementation had a lot of issues (and I also let some bugs go through), so this implementation is more simplified!

  • Remove the manual redirect loop
  • Validate resolved IpAddr inside the DNS resolver itself
  • Remove PINNED_ADDR
  • Documented dns::is_disallowed_ip() a bit more
  • Renamed the reqwest client for mod downloads yet again

@Fleeym
Fleeym merged commit 891fcf4 into main Jul 23, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant