add pointer to which IP address ranges are blocked by SSRF protection

This commit is contained in:
Markus Kahl
2026-03-09 12:31:36 +00:00
parent 9e7833ce46
commit c1bf546c30
2 changed files with 4 additions and 2 deletions
+1 -1
View File
@@ -33,7 +33,7 @@ class UserMailer < ApplicationMailer
helper_method :message_url
def test_mail(user, delivery_method_options:)
def test_mail(user, delivery_method_options: {})
@welcome_url = url_for(controller: "/homescreen")
open_project_headers "Type" => "Test"
+3 -1
View File
@@ -1181,10 +1181,12 @@ module Settings
},
ssrf_protection_ip_allowlist: {
description: "
Connections to certain IP addresses (such as private ranges) are blocked to prevent SSRF attacks.
Connections to certain IP addresses (such as private ranges, c.f. [1]) are blocked to prevent SSRF attacks.
Use this setting to explicitly allow given IP addresses which would otherwise be blocked.
Takes a comma or space separated list of IPv4 and IPv6 addresses (including masks for ranges),
e.g. `192.168.255.255/16`.
[1] https://github.com/arkadiyt/ssrf_filter/blob/main/lib/ssrf_filter/ssrf_filter.rb#L28-L58
".squish,
format: :string,
default: "",