• Douwe Maan's avatar
    Protect Gitlab::HTTP against DNS rebinding attack · e2051df6
    Douwe Maan authored
    Gitlab::HTTP now resolves the hostname only once, verifies the IP is not
    blocked, and then uses the same IP to perform the actual request, while
    passing the original hostname in the `Host` header and SSL SNI field.
    e2051df6
Name
Last commit
Last update
..
01_secret_token.rb Loading commit data...
0_acts_as_taggable.rb Loading commit data...
0_as_concern.rb Loading commit data...
0_inflections.rb Loading commit data...
0_post_deployment_migrations.rb Loading commit data...
1_settings.rb Loading commit data...
2_gitlab.rb Loading commit data...
5_backend.rb Loading commit data...
6_validations.rb Loading commit data...
7_prometheus_metrics.rb Loading commit data...
7_redis.rb Loading commit data...
8_devise.rb Loading commit data...
8_gitaly.rb Loading commit data...
9_fast_gettext.rb Loading commit data...
action_dispatch_http_mime_negotiation.rb Loading commit data...
action_mailer_hooks.rb Loading commit data...
active_record_avoid_type_casting_in_uniqueness_validator.rb Loading commit data...
active_record_data_types.rb Loading commit data...
active_record_lifecycle.rb Loading commit data...
active_record_locking.rb Loading commit data...
active_record_migration.rb Loading commit data...
active_record_mysql_timestamp.rb Loading commit data...
active_record_preloader.rb Loading commit data...
active_record_schema_ignore_tables.rb Loading commit data...
active_record_table_definition.rb Loading commit data...
active_record_verbose_query_logs.rb Loading commit data...
ar_mysql_jsonb_support.rb Loading commit data...
ar_native_database_types.rb Loading commit data...
ar_speed_up_migration_checking.rb Loading commit data...
attr_encrypted_no_db_connection.rb Loading commit data...
backtrace_silencers.rb Loading commit data...
batch_loader.rb Loading commit data...
bootstrap_form.rb Loading commit data...
bullet.rb Loading commit data...
chronic_duration.rb Loading commit data...
connection_fix.rb Loading commit data...
console_message.rb Loading commit data...
cookies_serializer.rb Loading commit data...
correlation_id.rb Loading commit data...
date_time_formats.rb Loading commit data...
default_url_options.rb Loading commit data...
deprecations.rb Loading commit data...
devise_password_length.rb.example Loading commit data...
direct_upload_support.rb Loading commit data...
doorkeeper.rb Loading commit data...
doorkeeper_openid_connect.rb Loading commit data...
etag_caching.rb Loading commit data...
fill_shards.rb Loading commit data...
fix_local_cache_middleware.rb Loading commit data...
flipper.rb Loading commit data...
fog_core_patch.rb Loading commit data...
fog_google_https_private_urls.rb Loading commit data...
forbid_sidekiq_in_transactions.rb Loading commit data...
gettext_rails_i18n_patch.rb Loading commit data...
gitlab_shell_secret_token.rb Loading commit data...
gitlab_workhorse_secret.rb Loading commit data...
go_get.rb Loading commit data...
graphql.rb Loading commit data...
grpc.rb Loading commit data...
hamlit.rb Loading commit data...
health_check.rb Loading commit data...
hipchat_client_patch.rb Loading commit data...
http_hostname_override.rb Loading commit data...
kaminari_active_record_relation_methods_with_limit.rb Loading commit data...
kaminari_config.rb Loading commit data...
lograge.rb Loading commit data...
macos.rb Loading commit data...
mime_types.rb Loading commit data...
mini_magick.rb Loading commit data...
mysql_ignore_postgresql_options.rb Loading commit data...
mysql_set_length_for_binary_indexes.rb Loading commit data...
new_framework_defaults.rb Loading commit data...
omniauth.rb Loading commit data...
pages.rb Loading commit data...
peek.rb Loading commit data...
postgresql_cte.rb Loading commit data...
postgresql_limit_fix.rb Loading commit data...
postgresql_opclasses_support.rb Loading commit data...
premailer.rb Loading commit data...
query_limiting.rb Loading commit data...
rack_attack.rb.example Loading commit data...
rack_attack_git_basic_auth.rb Loading commit data...
rack_attack_global.rb Loading commit data...
rack_attack_logging.rb Loading commit data...
rack_lineprof.rb Loading commit data...
rbtrace.rb Loading commit data...
relative_naming_ci_namespace.rb Loading commit data...
relative_url.rb.sample Loading commit data...
request_context.rb Loading commit data...
request_profiler.rb Loading commit data...
routing_draw.rb Loading commit data...
rspec_profiling.rb Loading commit data...
sentry.rb Loading commit data...
server_uptime.rb Loading commit data...
session_store.rb Loading commit data...
sherlock.rb Loading commit data...
sidekiq.rb Loading commit data...
smtp_settings.rb.sample Loading commit data...
sprockets_base_file_digest_key.rb Loading commit data...
static_files.rb Loading commit data...
time_zone.rb Loading commit data...
tracing.rb Loading commit data...
trusted_proxies.rb Loading commit data...
warden.rb Loading commit data...
workhorse_multipart.rb Loading commit data...
wrap_parameters.rb Loading commit data...
zz_metrics.rb Loading commit data...