diff --git a/src/main/java/de/thm/arsnova/controller/WelcomeController.java b/src/main/java/de/thm/arsnova/controller/WelcomeController.java index c036abda8e3be9e8068340da46af383a9baf5969..0a394245c3f49d8784f0e68617f2c83fefa3a502 100644 --- a/src/main/java/de/thm/arsnova/controller/WelcomeController.java +++ b/src/main/java/de/thm/arsnova/controller/WelcomeController.java @@ -85,7 +85,7 @@ public class WelcomeController extends AbstractController { final HttpServletRequest request ) { /* Block requests from the server itself to prevent DoS attacks caused by request loops */ - if ("127.0.0.1".equals(request.getRemoteAddr())) { + if ("127.0.0.1".equals(request.getRemoteAddr()) || "::1".equals(request.getRemoteAddr())) { throw new BadRequestException("Access to localhost not allowed."); } /* Block requests to servers in private networks */