Skip to content

x509util: block private/loopback hosts in URL-fetching helpers - #1761

Open
1seal wants to merge 2 commits into
google:masterfrom
1seal:fix/ssrf-url-validation-x509util
Open

x509util: block private/loopback hosts in URL-fetching helpers#1761
1seal wants to merge 2 commits into
google:masterfrom
1seal:fix/ssrf-url-validation-x509util

x509util: harden SSRF guard against DNS rebinding and HTTP redirects

13209c4
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Mar 23, 2026 in 7s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ 13209c4 Author: @1seal <se****ty​@1seal.org>

(Only the first commit for a unique contributor is listed.)

View more details on Google CLA