Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Closes request #31954: HTTP responses with a status code different than 407 should not be marked as SSRF filtered

Download Browse

The filtering proxy might reject requests and set the `X-Smokescreen-Error` but only the ones with 407 status code should be considered as a possible SSRf attempt. The rest is more likely to an attempt to reach broken services. Change-Id: Ibd3be87c01a02495c9c22e59fb76faa7a1086a46

+13 −1
Thomas Gerbet (tgerbet) 2023-05-22 16:37
Thomas Gerbet (tgerbet) 2023-05-22 16:37
4c218cffef94f23d36daf198fd64bcdab1eb421c
e642e52c3c30ee2dab59ad7bb20fece035159fe6
git #tuleap/stable/4c218cffef94f23d36daf198fd64bcdab1eb421c

Modified Files

Side by side diff
Inline diff
Name
M src/common/Http/Client/FilteredOutboundRequestJustification.php +3 −0 Go to diff View file
M tests/unit/common/Http/Client/FilteredOutboundRequestJustificationTest.php +10 −1 Go to diff View file