1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2025-02-08 04:48:28 +01:00
phorge-phorge/src/infrastructure/env
epriestley 5a060b34df Add IPv6 reserved addresses to the default outbound blacklist
Summary:
Ref T11939. Depends on D16984. Now that CIDRLists can contain IPv6 addresses, blacklist all of the reserved IPv6 space.

This reserved blacklist is used to prevent users from accessing internal services via "Import Calendar" or "Add Macro".

They can't actually reach IPv6 addresses via these mechanisms yet because we need to do more work to support outbound IPv6 requests, but make sure reserved IPv6 space is blacklisted already when that support eventaully arrives.

Also, clean up some error messages (e.g., for trying to hit a bad URI in "Add Macro").

Test Plan:
  - Loaded pages with default blacklist.
  - Tried to make requests into IPv6 space.
  - Currently, this is impossible because of `parse_url()` and `gethostynamel()` calls.

Reviewers: chad

Reviewed By: chad

Maniphest Tasks: T11939

Differential Revision: https://secure.phabricator.com/D16986
2016-12-05 11:20:13 -08:00
..
__tests__ phtize all the things 2015-05-22 21:16:39 +10:00
PhabricatorConfigDatabaseSource.php Add database configuration source to the source stack 2013-01-17 15:10:21 -08:00
PhabricatorConfigDefaultSource.php Read default values of custom config options 2013-01-19 08:36:08 -08:00
PhabricatorConfigDictionarySource.php Formalize configuration sources and source stacks 2012-12-25 06:44:29 -08:00
PhabricatorConfigFileSource.php phtize all the things 2015-05-22 21:16:39 +10:00
PhabricatorConfigLocalSource.php phtize all the things 2015-05-22 21:16:39 +10:00
PhabricatorConfigProxySource.php phtize all the things 2015-05-22 21:16:39 +10:00
PhabricatorConfigSiteSource.php Add an extensible "SiteSource" for configuration 2014-11-05 15:30:40 -08:00
PhabricatorConfigSource.php Extend from Phobject 2015-06-15 18:02:27 +10:00
PhabricatorConfigStackSource.php phtize all the things 2015-05-22 21:16:39 +10:00
PhabricatorEnv.php Add IPv6 reserved addresses to the default outbound blacklist 2016-12-05 11:20:13 -08:00
PhabricatorScopedEnv.php Extend from Phobject 2015-06-15 18:02:27 +10:00