summaryrefslogtreecommitdiff
path: root/spec/lib/gitlab/http_connection_adapter_spec.rb
Commit message (Collapse)AuthorAgeFilesLines
* Stub DNS to return IPv4 addressdeterminstic_dns_specsThong Kuah2019-07-291-0/+6
| | | | Otherwise certain machines return IPv6 first, which is non-deterministic
* Add DNS rebinding protection settingsOswaldo Ferreira2019-05-301-0/+32
|
* Protect Gitlab::HTTP against DNS rebinding attackDouwe Maan2019-05-301-0/+88
Gitlab::HTTP now resolves the hostname only once, verifies the IP is not blocked, and then uses the same IP to perform the actual request, while passing the original hostname in the `Host` header and SSL SNI field.