Skip to content

Commit 12468d6

Browse files
authored
fix(plugins): guard integration plugins against SSRF (#3407)
1 parent 1008f82 commit 12468d6

23 files changed

Lines changed: 1085 additions & 204 deletions

File tree

‎app/controlplane/cmd/main.go‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,7 +133,11 @@ func main() {
133133
}
134134

135135
// Load plugins
136-
availablePlugins, err := plugins.Load(bc.GetPluginsDir(), logger)
136+
netPolicy := sdk.NetworkPolicy{
137+
BlockPrivateTargets: bc.GetPluginsNetworkPolicy().GetBlockPrivateTargets(),
138+
}
139+
140+
availablePlugins, err := plugins.Load(bc.GetPluginsDir(), netPolicy, logger)
137141
if err != nil {
138142
panic(err)
139143
}

0 commit comments

Comments
 (0)