Pandore/homarr
Public Access
1
0 Fork 0
Code Actions Activity

fix v2 hardening review findings

Browse Source
This commit is contained in:
ajnart committed 2026-07-28 15:28:58 +02:00
1 parent b82a6a7abc
commit a7eae3ff81
35 files changed
+1147 -277
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

apps/workshop/workshop-url.awk
+4 -1
View File
@@ -32,11 +32,14 @@ function valid_hostname(value, labels, count, label_index) {
return 1
}
function valid_ipv6(value, percent, address, zone, collapsed, parts, count, groups, part_index) {
function valid_ipv6(value, percent, address, starts_single_colon, ends_single_colon, collapsed, parts, count, groups, part_index) {
percent = index(value, "%")
if (percent) return 0
address = value
if (address !~ /:/ || address ~ /:::/ || address !~ /^[0-9A-Fa-f:.]+$/) return 0
starts_single_colon = substr(address, 1, 1) == ":" && substr(address, 1, 2) != "::"
ends_single_colon = substr(address, length(address), 1) == ":" && substr(address, length(address) - 1) != "::"
if (starts_single_colon || ends_single_colon) return 0
collapsed = address
sub(/::/, "", collapsed)
if (collapsed ~ /::/) return 0