mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-10-26 06:19:53 +00:00
ce44e3ad79
Add an explicit RFC1918 and IPv6 ULA allowlist for on-premises OIDC providers while retaining SSRF protections for loopback, link-local, metadata, multicast, and unspecified destinations. Apply destination validation to discovery, token, UserInfo, redirects, and actual network dials.\n\nRefs #435\n\nThanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)