evazion 99221e4028 Downloads::File: fix SSRF attack when fetching remote size (#2498). ...

Fixes the banned IP check not being applied when fetching the remote
file size. This allowed one to trick Danbooru into sending HEAD requests
to private IPs:

  http://danbooru.donmai.us/uploads/new?url=http://127.0.0.1/test.jpg

2018-09-18 12:16:27 -05:00

..

controllers

Implement forum topic voting and tag change pruning (#3580)

2018-04-26 15:31:06 -07:00

factories

add support for upload preprocessing

2018-06-14 17:52:41 -07:00

files

add support for upload preprocessing

2018-06-14 17:52:41 -07:00

fixtures

Implement forum topic voting and tag change pruning (#3580)

2018-04-26 15:31:06 -07:00

functional

artist urls: add tests for controller + artist url search.

2018-09-15 19:58:55 -05:00

helpers

Fix #3497: Invalid DText denial of service attack.

2018-01-14 16:14:18 -06:00

mailers/previews

Fix #3846: Subscribed forum posts link to invalid URL in email updates.

2018-08-27 22:04:37 -05:00

models

skip tests that throw net::opentimeout

2018-09-17 17:00:46 -07:00

test_helpers

Refactor sources

2018-08-24 12:10:51 -07:00

unit

Downloads::File: fix SSRF attack when fetching remote size (#2498).

2018-09-18 12:16:27 -05:00

test_helper.rb

add logic for persisting pixiv sessions in tests

2018-05-10 13:59:57 -07:00