Skip to content
代码片段 群组 项目
未验证 提交 e2c04629 编辑于 作者: Stan Hu's avatar Stan Hu
浏览文件

Patch Net::HTTP#connect to make SSRF protection work

Due to https://github.com/ruby/net-http/pull/36, the SNI hostname
was not being set because the `connect` method always received
an IP address. We patch this change so that SNI will be used if
the hostname override is present.

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/413528
上级 e10a9992
No related branches found
No related tags found
无相关合并请求
加载中
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册