2 Commits (d2d9bc846ec13b7a8c5be3c6e671561ea4afcdc8)

Author	SHA1	Message	Date
wxiaoguang	013fb73068	Use `hostmatcher` to replace `matchlist`, improve security (#17605) ... Use hostmacher to replace matchlist. And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.	3 years ago
wxiaoguang	599ff1c054	Only allow webhook to send requests to allowed hosts (#17482)	3 years ago