disallow_private_ip_ranges and private_ip_exception_urls settings don't work as expected #4049
Open
5 tasks done
Labels
bug
Something is not working.
Preflight checklist
Ory Network Project
No response
Describe the bug
To avoid SSRF, Kratos will block calling some private IP ranges.
This should be disabled by either doing:
or by whitelisting the relevant URL:
However, for the IP range 100.64.0.0/10, doing any of those will not work.
The exceptions are not taken into account.
This is not directly an issue in Kratos, but in ory/x/httpx. See related issue: ory/x#805
Reproducing the bug
See related issue: ory/x#805
Relevant log output
No response
Relevant configuration
No response
Version
v1.2.0
On which operating system are you observing this issue?
macOS
In which environment are you deploying?
Kubernetes with Helm
Additional Context
No response
The text was updated successfully, but these errors were encountered: