The GitHub Actions job "CI" on 
rocketmq-dashboard.git/fix/ssrf-bypass-loopback-ip-1422 has failed.
Run started by GitHub user tju-yxq (triggered by tju-yxq).

Head commit for run:
cca2db11e4600d2ffaaa6f64ea74f715d384aeec / Yxq <[email protected]>
[ISSUE #1422] Block loopback IP in data source SSRF guard

The isAllowedDataSourceHost method blocked 'localhost' by string
comparison but did not check isLoopbackAddress(), allowing 127.0.0.1
to bypass the SSRF guard.

Fixes #1422

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/31358369612

With regards,
GitHub Actions via GitBox

Reply via email to