1f5fe1b237
SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) ( #6260 )
...
* SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468)
* SMTP SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (#6264 )
---------
Co-authored-by: pajowu <engelhardt@pretix.eu >
2026-06-26 16:45:20 +02:00
Raphael Michel and Raphael Michel
eb068f524c
[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535)
2026-06-25 16:46:13 +02:00
Raphael Michel and GitHub
a75dbb5d62
SSRF protection: Block requests to CGNAT addresses (Z#23235334) ( #6220 )
2026-05-27 16:45:11 +02:00
Raphael Michel and Raphael Michel
f50548cd02
Fix crash on build
2026-04-10 10:34:15 +02:00
Raphael Michel and Raphael Michel
bb450e1be9
Add default protection for SSRF
2026-04-10 10:34:15 +02:00
Raphael Michel and GitHub
177a7d07fc
Update license header ( #5540 )
2025-10-10 15:32:46 +02:00
Raphael Michel and GitHub
645c9d5900
Add "Partitioned" flag to our cookies ( #3830 )
2024-01-25 09:46:04 +01:00
Raphael Michel
558d0f1a4e
Increase requests default timeout
2023-12-12 15:12:21 +01:00
Raphael Michel
0e832a7c41
Fix function signature of monkeypatched HTTP adapter
2023-12-12 14:37:34 +01:00
Raphael Michel
c8b8fba171
Set timeout correctly
2023-12-02 14:49:31 +01:00
Raphael Michel
4580d6f710
Clean up monkeypatch code
2023-12-02 14:48:05 +01:00
Raphael Michel
2a19a423de
Remove copy-paste artifact
2023-12-02 14:47:17 +01:00
Raphael Michel
409c1eef30
Add default timeout for HTTP requests
2023-12-02 14:45:28 +01:00
Raphael Michel
7545e92373
[SECURITY] Do not allow Pillow to parse EPS files
2023-09-12 11:50:01 +02:00
Raphael Michel
3be6e83f33
Add missing license header
2022-01-25 21:08:28 +01:00
Raphael Michel
9d6f11718a
Work around performance issue in vobject library
2022-01-24 15:46:48 +01:00