mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-10-28 05:58:40 -04:00
tomac4tandInverle
859a2ad039
* Fix local DNS leak when fetching feeds through a proxy Follow-up to #9390: `getRetryAfterFile()` passed the full URL to `Minz_Request::serverIsPublic()`, which then resolved the target hostname with the local resolver (`dns_get_record()`), even when a proxy was configured. With a socks5h/socks4a proxy this leaks the target hostname to the local DNS and defeats remote name resolution. - `Minz_Request::serverIsPublic()`: add an `$allowDnsResolve` parameter, and forward it to the recursive call so the guard holds for the whole recursion. - `FreshRSS_http_Util::getRetryAfterFile()`: do not resolve the host name when a proxy is configured (`$proxy === ''`), since the proxy is responsible for DNS. --------- Co-authored-by: Inverle <inverle@proton.me>
34 lines
806 B
JSON
34 lines
806 B
JSON
{
|
|
"name": "freshrss.org/freshrss",
|
|
"description": "A free, self-hostable aggregator",
|
|
"type": "project",
|
|
"homepage": "https://freshrss.org/",
|
|
"license": "AGPL-3.0",
|
|
"repositories": [
|
|
{
|
|
"type": "git",
|
|
"url": "https://github.com/FreshRSS/simplepie.git"
|
|
},
|
|
{
|
|
"type": "git",
|
|
"url": "https://framagit.org/marienfressinaud/lib_opml.git"
|
|
}
|
|
],
|
|
"require": {
|
|
"marienfressinaud/lib_opml": "dev-main#f0e850b6394af90b898daf0e65fcc7363457b844",
|
|
"phpgt/cssxpath": "v1.6.0",
|
|
"phpmailer/phpmailer": "7.1.1",
|
|
"simplepie/simplepie": "dev-freshrss#042298d6550e74225cf0eedba1913cf68976d6bb"
|
|
},
|
|
"config": {
|
|
"sort-packages": true,
|
|
"vendor-dir": "./"
|
|
},
|
|
"scripts": {
|
|
"post-update-cmd": [
|
|
"git clean -d -ff -X .",
|
|
"find . -name '.git' -type d -exec rm -rf {} + || true"
|
|
]
|
|
}
|
|
}
|