Homec4science

Mostly defuse DNS rebinding attack for outbound requests

Authored by epriestley <git@epriestley.com> on Mar 26 2015, 19:12.

Description

Mostly defuse DNS rebinding attack for outbound requests

Summary: Ref T6755. I'll add some notes there about specifics.

Test Plan:

  • Made connections to HTTP and HTTPS URIs.
  • Added some debugging code to verify that HTTP URIs were pre-resolved.

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T6755

Differential Revision: https://secure.phabricator.com/D12169

Details

Committed
epriestley <git@epriestley.com>Mar 26 2015, 19:12
Pushed
aubortJan 31 2017, 17:16
Parents
rPH2e72e9ff31fd: Rate limit outbound requests in Macros
Branches
Unknown
Tags
Unknown

Event Timeline

epriestley <git@epriestley.com> committed rPH40fb0f98df6c: Mostly defuse DNS rebinding attack for outbound requests (authored by epriestley <git@epriestley.com>).Mar 26 2015, 19:12