element-hq / element-hq/matrix-authentication-service
Implement IP and DNS-based filtering in the HTTP client
Open
O-Uncommon
S-Tolerable
T-Enhancement
- Dominant language
- Rust
- Stars
- 280
- Forks
- 111
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 25
Description
*This issue was originally created by [**@sandhose**](https://github.com/sandhose) at .*
The HTTP client can be used to crawl some HTTP resources, like remove JWKS. We want to avoid malicious actors to reach internal endpoints.
We should implement on the DNS resolver level IP and DNS filtering. The default IP blacklist in Synapse could be useful.
Contributor guide
Assessment
This issue has not been assessed yet.