Commit graph

12 commits

Author SHA1 Message Date
Côme Chilliet
6bdb5d2804
Pass default values to idn_to_utf8 to fix behavior under PHP 7.3
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-15 12:11:09 +01:00
Côme Chilliet
96d3d09444
Fix tests for nested v4 in v6
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:27:27 +01:00
Côme Chilliet
be070516a9
Use new dependency to normalize IPs
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:26:52 +01:00
Côme Chilliet
72f60a6f96
Add missing urldecode and idn_to_utf8 calls to local address checker
The call to idn_to_utf8 call is actually to apply normalization

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:25:58 +01:00
Côme Chilliet
28dd116b92
Copy IpUtils from Symfony to avoid new dependency on backport
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 15:30:56 +02:00
Côme Chilliet
91a244e77e Use Symfony IpUtils to check for local IP ranges
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:33 +00:00
Côme Chilliet
a04cb4dfa6 Check for local IPs nested in IPv6 as well
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:31 +00:00
Côme Chilliet
8ad9a15514 Refactor local IP if and set strict to true for in_array
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:29 +00:00
Côme Chilliet
342934e9c2 Improve local IP detection
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:27 +00:00
Côme Chilliet
1f94d1b219 Improve local domain detection
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-06-23 10:57:26 +00:00
John Molakvoæ (skjnldsv)
215aef3cbd
Update php licenses
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-06-04 22:02:41 +02:00
Lukas Reschke
5f3abffe6f Improve networking checks
Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-04-06 11:37:47 +00:00