bookstack

Commit Graph

Author	SHA1	Message	Date
Dan Brown	903895814a	SSR: Updated allow list handling & covered webhook usage - Covered webhook SSR allow list useage via test. - Updated allow list handling to use trailing slash, or hash, or end of line as late anchor for better handling for hosts (prevent .co.uk passing for .co domain host)	2023-08-26 20:13:37 +01:00
Dan Brown	c324ad928d	Security: Added new SSR allow list and validator Included unit tests to cover validator functionality. Added to webhooks. Still need to do testing specifically for webhooks.	2023-08-26 15:28:29 +01:00

Author

SHA1

Message

Date

Dan Brown

903895814a

SSR: Updated allow list handling & covered webhook usage

- Covered webhook SSR allow list useage via test.
- Updated allow list handling to use trailing slash, or hash, or end of
  line as late anchor for better handling for hosts (prevent .co.uk
passing for .co domain host)

2023-08-26 20:13:37 +01:00

Dan Brown

c324ad928d

Security: Added new SSR allow list and validator

Included unit tests to cover validator functionality.
Added to webhooks.
Still need to do testing specifically for webhooks.

2023-08-26 15:28:29 +01:00

2 Commits