awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 05:27:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

block local and private IPs on host header

Browse Source
This commit is contained in:
x032205
2025-05-09 00:08:02 -04:00
parent 2700a96df4
commit b21c17572d
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/identity-oci-auth/identity-oci-auth-service.ts
+2 -1
View File
@@ -29,6 +29,7 @@ import {
TRevokeOciAuthDTO, TRevokeOciAuthDTO,
TUpdateOciAuthDTO TUpdateOciAuthDTO
} from "./identity-oci-auth-types"; } from "./identity-oci-auth-types";
import { blockLocalAndPrivateIpAddresses } from "@app/lib/validator";
type TIdentityOciAuthServiceFactoryDep = { type TIdentityOciAuthServiceFactoryDep = {
identityAccessTokenDAL: Pick<TIdentityAccessTokenDALFactory, "create" | "delete">; identityAccessTokenDAL: Pick<TIdentityAccessTokenDALFactory, "create" | "delete">;
@@ -55,7 +56,7 @@ export const identityOciAuthServiceFactory = ({
const identityMembershipOrg = await identityOrgMembershipDAL.findOne({ identityId: identityOciAuth.identityId }); const identityMembershipOrg = await identityOrgMembershipDAL.findOne({ identityId: identityOciAuth.identityId });
// TODO(andrey): Validate inputs await blockLocalAndPrivateIpAddresses(headers.host);
const { data } = await request.get<TOciGetUserResponse>(`https://${headers.host}/20160918/users/${userOcid}`, { const { data } = await request.get<TOciGetUserResponse>(`https://${headers.host}/20160918/users/${userOcid}`, {
headers headers