3 Commits (191a74d62254ca00be2ccdf7e3afe69c0f9d6c12)

Author	SHA1	Message	Date
wxiaoguang	a51efb4c2c	Support `hostname:port` to pass host matcher's check #19543 (#19543) ... hostmatcher: split the hostname from the `hostname:port` string, use the correct hostname to do the match.	2022-04-29 01:39:50 +07:00
wxiaoguang	013fb73068	Use `hostmatcher` to replace `matchlist`, improve security (#17605) ... Use hostmacher to replace matchlist. And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.	2021-11-20 17:34:05 +07:00
wxiaoguang	599ff1c054	Only allow webhook to send requests to allowed hosts (#17482)	2021-11-01 16:39:52 +07:00