jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Files
99221e4028016900fc8ddc04b2da07a9a5c229e8
danbooru/test/unit/downloads
History
evazion 99221e4028 Downloads::File: fix SSRF attack when fetching remote size (#2498). 
Fixes the banned IP check not being applied when fetching the remote
file size. This allowed one to trick Danbooru into sending HEAD requests
to private IPs:

  http://danbooru.donmai.us/uploads/new?url=http://127.0.0.1/test.jpg
2018-09-18 12:16:27 -05:00
..
art_station_test.rb
Refactor sources
2018-08-24 12:10:51 -07:00
deviant_art_test.rb
Refactor sources
2018-08-24 12:10:51 -07:00
file_test.rb
Downloads::File: fix SSRF attack when fetching remote size (#2498).
2018-09-18 12:16:27 -05:00
nico_seiga_test.rb
downloads: add tests for untested sites.
2018-02-24 13:42:00 -06:00
nijie_test.rb
downloads: add tests for untested sites.
2018-02-24 13:42:00 -06:00
pawoo_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
pixiv_test.rb
Refactor sources
2018-08-24 12:10:51 -07:00
tumblr_test.rb
cache api clients
2018-09-11 14:19:17 -07:00
twitter_test.rb
cache api clients
2018-09-11 14:19:17 -07:00