-
-
Notifications
You must be signed in to change notification settings - Fork 4.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Detect weird local ips #34160
Detect weird local ips #34160
Conversation
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
The call to idn_to_utf8 call is actually to apply normalization Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
Thanks for taking care 👍 In theory we can drop the iputils (symfony http-foundation) again and only use the ip-lib package: https://github.com/mlocati/ip-lib#check-if-an-address-is-contained-in-a-range This could also help with #33567 |
Hum but I trust the range detection in symfony more, especially it correctly tests ipv6 in ipv4 ranges, which ip-lib does not. |
Good point 👍 |
@kesselb I can make a PR to use ip-lib instead of iputils but I’d like to do so in a separate PR once this one is merged. |
3rdparty merged |
Sorry I was just thinking loud. The current way is fine and we can combine both libraries. |
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
/backport to stable24 |
/backport to stable23 |
/backport to stable22 |
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
/backport to stable25 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
/backport to stable25 |
Use new dependency to detect weird syntaxes