Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
ARSnova Backend
Manage
Activity
Members
Labels
Code
Merge requests
0
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Operate
Environments
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Help
Help
Support
GitLab documentation
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Privacy
Imprint
Contact
Snippets
Groups
Projects
Show more breadcrumbs
Paul-Christian Volkmer
ARSnova Backend
Commits
d2562f45
Commit
d2562f45
authored
7 years ago
by
Daniel Gerhardt
Browse files
Options
Downloads
Plain Diff
Merge branch 'headercheck-localhost-ipv6' into '2.x'
Also block local access using IPv6 See merge request !63
parents
1d40e8d6
7dd0573b
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
src/main/java/de/thm/arsnova/controller/WelcomeController.java
+1
-1
1 addition, 1 deletion
...ain/java/de/thm/arsnova/controller/WelcomeController.java
with
1 addition
and
1 deletion
src/main/java/de/thm/arsnova/controller/WelcomeController.java
+
1
−
1
View file @
d2562f45
...
...
@@ -85,7 +85,7 @@ public class WelcomeController extends AbstractController {
final
HttpServletRequest
request
)
{
/* Block requests from the server itself to prevent DoS attacks caused by request loops */
if
(
"127.0.0.1"
.
equals
(
request
.
getRemoteAddr
()))
{
if
(
"127.0.0.1"
.
equals
(
request
.
getRemoteAddr
())
||
"::1"
.
equals
(
request
.
getRemoteAddr
())
)
{
throw
new
BadRequestException
(
"Access to localhost not allowed."
);
}
/* Block requests to servers in private networks */
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment