From 714383a063f64fcc7c6a458182c4f9cf5a46df66 Mon Sep 17 00:00:00 2001 From: Joe Chen Date: Mon, 14 Mar 2022 22:06:08 +0800 Subject: conf: add allowlist for accessing local network (#6842) --- internal/route/repo/webhook.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'internal/route/repo/webhook.go') diff --git a/internal/route/repo/webhook.go b/internal/route/repo/webhook.go index 77696bbc..c7e99db6 100644 --- a/internal/route/repo/webhook.go +++ b/internal/route/repo/webhook.go @@ -128,7 +128,7 @@ func validateWebhook(actor *db.User, l macaron.Locale, w *db.Webhook) (field, ms return "PayloadURL", l.Tr("repo.settings.webhook.err_cannot_parse_payload_url", err), false } - if netutil.IsLocalHostname(payloadURL.Hostname()) { + if netutil.IsLocalHostname(payloadURL.Hostname(), conf.Security.LocalNetworkAllowlist) { return "PayloadURL", l.Tr("repo.settings.webhook.err_cannot_use_local_addresses"), false } } -- cgit v1.2.3