Skip to content

client: Only accept connections to remote hosts

meskio requested to merge meskio/webtunnel:reject_local_ips into main

Prevent an attacker from creating connections to local addresses (SSRF).

To simplify the code remove the support for the 'addr' argument, no deployed bridge uses it.

Edited by meskio

Merge request reports