Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to configure httplug-ssrf-plugin #330

Open
mudkipme opened this issue Jun 21, 2023 · 0 comments
Open

Allow to configure httplug-ssrf-plugin #330

mudkipme opened this issue Jun 21, 2023 · 0 comments

Comments

@mudkipme
Copy link

I'm using wallabag and I had found wallabag couldn't download any webpages due to my network environment.

The network for my home server is configured to use a tunnel and its local DNS server responding every DNS request in 198.18.0.0/16. That kind of tools is popular in some regions.

I have figured out that it is because j0k3r/httplug-ssrf-plugin blacklisted non-public IPv4 CIDRs. While it is possible to override the default options of ServerSideRequestForgeryProtectionPlugin to allow some IP ranges, it is not exposed to GrabyConfig.

My current fix is below but it's not ideal.

sed -i '/198.18.0.0/d' /var/www/wallabag/vendor/j0k3r/httplug-ssrf-plugin/src/Options.php
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants