Côme Chilliet
6bdb5d2804
Pass default values to idn_to_utf8 to fix behavior under PHP 7.3
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-15 12:11:09 +01:00
Côme Chilliet
96d3d09444
Fix tests for nested v4 in v6
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:27:27 +01:00
Côme Chilliet
be070516a9
Use new dependency to normalize IPs
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:26:52 +01:00
Côme Chilliet
72f60a6f96
Add missing urldecode and idn_to_utf8 calls to local address checker
...
The call to idn_to_utf8 call is actually to apply normalization
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-11-14 11:25:58 +01:00
Côme Chilliet
28dd116b92
Copy IpUtils from Symfony to avoid new dependency on backport
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-08-01 15:30:56 +02:00
Côme Chilliet
91a244e77e
Use Symfony IpUtils to check for local IP ranges
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:33 +00:00
Côme Chilliet
a04cb4dfa6
Check for local IPs nested in IPv6 as well
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:31 +00:00
Côme Chilliet
8ad9a15514
Refactor local IP if and set strict to true for in_array
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:29 +00:00
Côme Chilliet
342934e9c2
Improve local IP detection
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-07-26 09:45:27 +00:00
Côme Chilliet
1f94d1b219
Improve local domain detection
...
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
2022-06-23 10:57:26 +00:00
John Molakvoæ (skjnldsv)
215aef3cbd
Update php licenses
...
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
2021-06-04 22:02:41 +02:00
Lukas Reschke
5f3abffe6f
Improve networking checks
...
Whilst we currently state that SSRF is generally outside of our threat model, this is something where we should invest to improve this.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2021-04-06 11:37:47 +00:00