awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-02 19:25:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: use dns lookup as fallback for dns resolve

Browse Source
This commit is contained in:
Scott Wilson
2025-05-05 11:56:49 -07:00
parent 95b6676976
commit d28c87ee67
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/dynamic-secret/dynamic-secret-fns.ts
+14 -4
View File
@@ -24,8 +24,13 @@ export const verifyHostInputValidity = async (host: string, isGateway = false) =
if (net.isIPv4(el)) { if (net.isIPv4(el)) {
exclusiveIps.push(el); exclusiveIps.push(el);
} else { } else {
const resolvedIps = await dns.resolve4(el); try {
exclusiveIps.push(...resolvedIps); const resolvedIps = await dns.resolve4(el);
exclusiveIps.push(...resolvedIps);
} catch {
const resolvedIps = (await dns.lookup(el, { all: true })).map(({ address }) => address);
exclusiveIps.push(...resolvedIps);
}
} }
} }
} }
@@ -38,8 +43,13 @@ export const verifyHostInputValidity = async (host: string, isGateway = false) =
if (normalizedHost === "localhost" || normalizedHost === "host.docker.internal") { if (normalizedHost === "localhost" || normalizedHost === "host.docker.internal") {
throw new BadRequestError({ message: "Invalid db host" }); throw new BadRequestError({ message: "Invalid db host" });
} }
const resolvedIps = await dns.resolve4(host); try {
inputHostIps.push(...resolvedIps); const resolvedIps = await dns.resolve4(host);
inputHostIps.push(...resolvedIps);
} catch {
const resolvedIps = (await dns.lookup(host, { all: true })).map(({ address }) => address);
inputHostIps.push(...resolvedIps);
}
} }
if (!isGateway && !(appCfg.DYNAMIC_SECRET_ALLOW_INTERNAL_IP || appCfg.ALLOW_INTERNAL_IP_CONNECTIONS)) { if (!isGateway && !(appCfg.DYNAMIC_SECRET_ALLOW_INTERNAL_IP || appCfg.ALLOW_INTERNAL_IP_CONNECTIONS)) {