Skip to content
代码片段 群组 项目
未验证 提交 b42c01c7 编辑于 作者: Stan Hu's avatar Stan Hu
浏览文件

Fix downloads failing due to duplicate SSRF filters

ssrf_filter v1.0.8 patches `SSLSocket#hostname=` to protect against
server side request forgery (SSRF) attacks. We do the same thing in
`gems/gitlab-http/lib/hostname_override_patch.rb`, except ssrf_filter
lazily patches the request upon first use with CarrierWave. When both
patches are activated, the process fails to download the file and
reports `stack level too deep`.

Relates to
https://gitlab.com/gitlab-com/gl-infra/production/-/issues/19348

Changelog: fixed
上级 22afb07d
No related branches found
No related tags found
加载中
加载中
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册