Gabi afb989ced9 security(connlib): Dont allow acces to non-subdomains for a given resource (#2996) ...

Previously, we just assumed that the domain in the query is a subdomain
of the resource but a malicious actor can hijack that field to access
domains that doesn't correspond to that resource.

With this patch we don't even resolve the address for unrelated domains.

2023-12-22 17:42:32 +00:00

..

connlib

security(connlib): Dont allow acces to non-subdomains for a given resource (#2996)

2023-12-22 17:42:32 +00:00

firezone-cli-utils

Fix/firezone id handling (#2958)

2023-12-19 15:38:27 -06:00

gateway

Fix/firezone id handling (#2958)

2023-12-19 15:38:27 -06:00

linux-client

connlib: tune disconnect parameters (#2977)

2023-12-21 19:37:07 +00:00

phoenix-channel

chore(ci): Use 1.0.0 as version base (#2949)

2023-12-19 14:19:16 +00:00

relay

chore(ci): Use 1.0.0 as version base (#2949)

2023-12-19 14:19:16 +00:00

windows-client

fix(rust): Incorrect perms on rust/ files (#2991)

2023-12-22 03:06:47 +00:00

.dockerignore

refactor(portal): Don't pin session token to user_agent or remote_ip (#2195)

2023-09-30 07:40:57 -07:00

.gitignore

Implement basic STUN server (#1603)

2023-05-10 07:58:32 -07:00

Cargo.lock

fix(rust): Incorrect perms on rust/ files (#2991)

2023-12-22 03:06:47 +00:00

Cargo.toml

ci(windows): remove hello-world and permissions-test projects (#2926)

2023-12-17 17:12:50 +00:00

docker-init.sh

Introduce Sites (#2516)

2023-10-27 13:10:36 -06:00

Dockerfile

Terraform improvements for production (#2873)

2023-12-11 19:41:01 -06:00

rust-toolchain.toml

ci: use sccache for Rust (#2402)

2023-10-18 10:25:31 -07:00