kaslo/pawkey-sk
1
0
Fork 0
Code Packages Activity

enforce port restrictions against requests that happen to be missing the port

Browse Source
This commit is contained in:
Hazelnoot
2025-05-13 22:22:40 -04:00
parent 4ddb16aa9a
commit ebd4ccdd55
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/backend/src/core/HttpRequestService.ts
+1 -1
View File
@@ -32,7 +32,7 @@ export function isPrivateIp(allowedPrivateNetworks: PrivateNetwork[] | undefined
for (const { cidr, ports } of allowedPrivateNetworks ?? []) { for (const { cidr, ports } of allowedPrivateNetworks ?? []) {
if (cidr[0].kind() === parsedIp.kind() && parsedIp.match(cidr)) { if (cidr[0].kind() === parsedIp.kind() && parsedIp.match(cidr)) {
if (port == null || ports == null || ports.includes(port)) { if (ports == null || (port != null && ports.includes(port))) {
return false; return false;
} }
} }