From 714383a063f64fcc7c6a458182c4f9cf5a46df66 Mon Sep 17 00:00:00 2001 From: Joe Chen Date: Mon, 14 Mar 2022 22:06:08 +0800 Subject: conf: add allowlist for accessing local network (#6842) --- internal/form/repo.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'internal/form') diff --git a/internal/form/repo.go b/internal/form/repo.go index bc0dc426..adcbc66a 100644 --- a/internal/form/repo.go +++ b/internal/form/repo.go @@ -12,6 +12,7 @@ import ( "github.com/unknwon/com" "gopkg.in/macaron.v1" + "gogs.io/gogs/internal/conf" "gogs.io/gogs/internal/db" "gogs.io/gogs/internal/netutil" ) @@ -71,7 +72,7 @@ func (f MigrateRepo) ParseRemoteAddr(user *db.User) (string, error) { return "", db.ErrInvalidCloneAddr{IsURLError: true} } - if netutil.IsLocalHostname(u.Hostname()) { + if netutil.IsLocalHostname(u.Hostname(), conf.Security.LocalNetworkAllowlist) { return "", db.ErrInvalidCloneAddr{IsURLError: true} } -- cgit v1.2.3