zitadel/cmd
Livio Spring 79fb4cc1cc
fix: correctly check denied domains and ips for actions (#8810)
# Which Problems Are Solved

System administrators can block hosts and IPs for HTTP calls in actions.
Using DNS, blocked IPs could be bypassed.

# How the Problems Are Solved

- Hosts are resolved (DNS lookup) to check whether their corresponding
IP is blocked.

# Additional Changes

- Added complete lookup ip address range and "unspecified" address to
the default `DenyList`
2024-10-22 16:16:44 +02:00
..
admin
build
encryption fix(setup): init projections (#7194) 2024-01-25 17:28:20 +01:00
hooks feat: support whole config as env (#6336) 2024-02-16 16:04:42 +00:00
initialise feat(v3alpha): web key resource (#8262) 2024-08-14 14:18:14 +00:00
key feat: api v2beta to api v2 (#8283) 2024-07-26 22:39:55 +02:00
mirror feat(storage): generic cache interface (#8628) 2024-09-25 21:40:21 +02:00
ready feat(v3alpha): web key resource (#8262) 2024-08-14 14:18:14 +00:00
setup perf(oidc): nest position clause for session terminated query (#8738) 2024-10-07 12:49:55 +00:00
start fix: correctly check denied domains and ips for actions (#8810) 2024-10-22 16:16:44 +02:00
tls
defaults.yaml fix: correctly check denied domains and ips for actions (#8810) 2024-10-22 16:16:44 +02:00
zitadel.go fix(mirror): read config correctly (#8330) 2024-07-18 14:00:58 +00:00