mirror of
https://github.com/gosticks/plane.git
synced 2025-10-16 12:45:33 +00:00
fix(webhook): allow private ip to be used as payload url (#5535)
Co-authored-by: gmajkic <gmajkic@veepee.com>
This commit is contained in:
parent
ff6c3ce1a0
commit
5fb2dd0b6e
@ -40,7 +40,7 @@ class WebhookSerializer(DynamicBaseSerializer):
|
|||||||
|
|
||||||
for addr in ip_addresses:
|
for addr in ip_addresses:
|
||||||
ip = ipaddress.ip_address(addr[4][0])
|
ip = ipaddress.ip_address(addr[4][0])
|
||||||
if ip.is_private or ip.is_loopback:
|
if ip.is_loopback:
|
||||||
raise serializers.ValidationError(
|
raise serializers.ValidationError(
|
||||||
{"url": "URL resolves to a blocked IP address."}
|
{"url": "URL resolves to a blocked IP address."}
|
||||||
)
|
)
|
||||||
@ -92,7 +92,7 @@ class WebhookSerializer(DynamicBaseSerializer):
|
|||||||
|
|
||||||
for addr in ip_addresses:
|
for addr in ip_addresses:
|
||||||
ip = ipaddress.ip_address(addr[4][0])
|
ip = ipaddress.ip_address(addr[4][0])
|
||||||
if ip.is_private or ip.is_loopback:
|
if ip.is_loopback:
|
||||||
raise serializers.ValidationError(
|
raise serializers.ValidationError(
|
||||||
{"url": "URL resolves to a blocked IP address."}
|
{"url": "URL resolves to a blocked IP address."}
|
||||||
)
|
)
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user