tomac4tandInverle 859a2ad039 Fix local DNS leak when fetching feeds through a proxy (#9451) ...

* Fix local DNS leak when fetching feeds through a proxy

Follow-up to #9390: `getRetryAfterFile()` passed the full URL to
`Minz_Request::serverIsPublic()`, which then resolved the target hostname
with the local resolver (`dns_get_record()`), even when a proxy was
configured. With a socks5h/socks4a proxy this leaks the target hostname
to the local DNS and defeats remote name resolution.

- `Minz_Request::serverIsPublic()`: add an `$allowDnsResolve` parameter,
  and forward it to the recursive call so the guard holds for the whole
  recursion.
- `FreshRSS_http_Util::getRetryAfterFile()`: do not resolve the host name
  when a proxy is configured (`$proxy === ''`), since the proxy is
  responsible for DNS.

---------

Co-authored-by: Inverle <inverle@proton.me>

2026-10-17 17:37:27 +02:00

..

dotNotationUtil.php

feat(favicon): Use feed-provided icon URL (<image><url>, Atom icon/logo, JSON Feed icon) (#8633)

2026-03-31 09:57:06 +02:00

feverUtil.php

Use PHP SensitiveParameter (#9322)

2026-09-19 19:52:07 +02:00

httpUtil.php

Fix local DNS leak when fetching feeds through a proxy (#9451)

2026-10-17 17:37:27 +02:00

passwordUtil.php

Use PHP SensitiveParameter (#9322)

2026-09-19 19:52:07 +02:00