zitadel/internal/actions
Livio Spring 7508e6c9f3
fix: correctly check denied domains and ips for actions (#8810)
# Which Problems Are Solved

System administrators can block hosts and IPs for HTTP calls in actions.
Using DNS, blocked IPs could be bypassed.

# How the Problems Are Solved

- Hosts are resolved (DNS lookup) to check whether their corresponding
IP is blocked.

# Additional Changes

- Added complete lookup ip address range and "unspecified" address to
the default `DenyList`

(cherry picked from commit 79fb4cc1cc)
2024-10-23 07:33:43 +02:00
..
object feat(actions): allow getting metadata of organizations from user grants (#7782) 2024-04-22 11:34:23 +00:00
actions_test.go perf: project quotas and usages (#6441) 2023-09-15 17:00:12 +02:00
actions.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
api.go feat(actions): add token customization flow and extend functionally with modules (#4337) 2022-10-06 14:23:59 +02:00
config.go feat: add quotas (#4779) 2023-02-15 02:52:11 +01:00
context.go feat(actions): add token customization flow and extend functionally with modules (#4337) 2022-10-06 14:23:59 +02:00
fields_test.go perf: project quotas and usages (#6441) 2023-09-15 17:00:12 +02:00
fields.go feat(actions): add token customization flow and extend functionally with modules (#4337) 2022-10-06 14:23:59 +02:00
http_module_config.go fix: correctly check denied domains and ips for actions (#8810) 2024-10-23 07:33:43 +02:00
http_module_test.go fix: correctly check denied domains and ips for actions (#8810) 2024-10-23 07:33:43 +02:00
http_module.go fix: correctly check denied domains and ips for actions (#8810) 2024-10-23 07:33:43 +02:00
log_module.go perf: project quotas and usages (#6441) 2023-09-15 17:00:12 +02:00
uuid_module.go merge main into next 2023-10-19 12:34:00 +02:00