element-hq / element-hq/matrix-authentication-service

Implement IP and DNS-based filtering in the HTTP client

Open
#1,018 0 comments 0 reactions 0 assignees View on GitHub
O-Uncommon S-Tolerable T-Enhancement
Dominant language
Rust
Stars
280
Forks
111
Avg merge
3d 1h
Merged PRs (30d)
25

Description

*This issue was originally created by [**@sandhose**](https://github.com/sandhose) at .*

The HTTP client can be used to crawl some HTTP resources, like remove JWKS. We want to avoid malicious actors to reach internal endpoints.
We should implement on the DNS resolver level IP and DNS filtering. The default IP blacklist in Synapse could be useful.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.