From 5fb2dd0b6e478fd6e7ebcacc151b762fa7fbccc9 Mon Sep 17 00:00:00 2001 From: Goran Date: Tue, 10 Sep 2024 11:27:30 +0200 Subject: [PATCH] fix(webhook): allow private ip to be used as payload url (#5535) Co-authored-by: gmajkic --- apiserver/plane/app/serializers/webhook.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apiserver/plane/app/serializers/webhook.py b/apiserver/plane/app/serializers/webhook.py index 175dea304..918d1705c 100644 --- a/apiserver/plane/app/serializers/webhook.py +++ b/apiserver/plane/app/serializers/webhook.py @@ -40,7 +40,7 @@ class WebhookSerializer(DynamicBaseSerializer): for addr in ip_addresses: ip = ipaddress.ip_address(addr[4][0]) - if ip.is_private or ip.is_loopback: + if ip.is_loopback: raise serializers.ValidationError( {"url": "URL resolves to a blocked IP address."} ) @@ -92,7 +92,7 @@ class WebhookSerializer(DynamicBaseSerializer): for addr in ip_addresses: ip = ipaddress.ip_address(addr[4][0]) - if ip.is_private or ip.is_loopback: + if ip.is_loopback: raise serializers.ValidationError( {"url": "URL resolves to a blocked IP address."} )