github-mirror/BookStack
2
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2024-11-26 18:30:50 +08:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity
4,406 Commits 11 Branches 200 Tags 75 MiB
adf1806fea
Commit Graph

2 Commits

Author SHA1 Message Date
Dan Brown
903895814a
SSR: Updated allow list handling & covered webhook usage 
- Covered webhook SSR allow list useage via test.
- Updated allow list handling to use trailing slash, or hash, or end of
  line as late anchor for better handling for hosts (prevent .co.uk
passing for .co domain host)
 2023-08-26 20:13:37 +01:00
Dan Brown
c324ad928d
Security: Added new SSR allow list and validator 
Included unit tests to cover validator functionality.
Added to webhooks.
Still need to do testing specifically for webhooks.
 2023-08-26 15:28:29 +01:00