gdorn/FreshRSS-Extensions
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

stricter destination filter

Browse source
This commit is contained in:
root 2020-04-05 20:46:45 +02:00
parent 398feee482
commit 5a6dc4940c
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
xExtension-ImageProxy/README.md
View file

@ -59,7 +59,11 @@ RewriteRule ^ http://%1 [QSA,P,L]
Satisfy any
</Location>
# CRITICAL: Do NOT allow access to local resources!!!
<LocationMatch "^/proxy/.*(localhost|127\.0\.0\.1|::1|local\.domain)">
# - (any) IPv4
# - (any) IPv6
# - localhost
# - local.domain (e.g. example.org)
<LocationMatch "^/proxy/https?:/+([0-9]{1,3}(\.[0-9]{1,3}){3}|([0-9a-zA-Z]{0,4}:?)?(:[0-9a-zA-Z]{1,4}:){0,6}([.:][0-9a-zA-Z]{1,4}){1,7}|[^/]*(localhost|local\.domain|example\.org))(/|$)">
Require all denied
</LocationMatch>
```