2019-02-20 11:56:19 -05:00
= form_for @application_setting, url: network_admin_application_settings_path(anchor: 'js-outbound-settings'), html: { class: 'fieldset-form' } do |f|
2018-04-03 13:30:14 -04:00
= form_errors(@application_setting)
%fieldset
2018-06-13 03:40:55 -04:00
.form-group
.form-check
2019-10-29 08:06:40 -04:00
= f.check_box :allow_local_requests_from_web_hooks_and_services, class: 'form-check-input', data: { qa_selector: 'allow_requests_from_services_checkbox' }
2019-07-26 06:21:52 -04:00
= f.label :allow_local_requests_from_web_hooks_and_services, class: 'form-check-label' do
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Allow requests to the local network from web hooks and services')
2019-07-26 06:21:52 -04:00
.form-check
= f.check_box :allow_local_requests_from_system_hooks, class: 'form-check-input'
= f.label :allow_local_requests_from_system_hooks, class: 'form-check-label' do
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Allow requests to the local network from system hooks')
2018-04-03 13:30:14 -04:00
2019-07-24 13:59:38 -04:00
.form-group
2020-10-29 02:08:45 -04:00
= f.label :outbound_local_requests_allowlist_raw, class: 'label-bold' do
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Local IP addresses and domain names that hooks and services may access')
= f.text_area :outbound_local_requests_allowlist_raw, placeholder: "example.com, 192.168.1.1, xn--itlab-j1a.com", class: 'form-control gl-form-input', rows: 8
2019-07-24 13:59:38 -04:00
%span.form-text.text-muted
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Requests to these domains and IP addresses are accessible to both system hooks and web hooks even when local requests are not allowed. IP ranges such as 1:0:0:0:0:0:0:0/124 and 127.0.0.0/28 are supported. Domain wildcards are not supported. To separate entries use commas, semicolons, or newlines. The allowlist can hold a maximum of 1000 entries. Domains must be IDNA encoded.')
= link_to _('Learn more.'), help_page_path('security/webhooks.md', anchor: 'allowlist-for-local-requests'), target: '_blank', rel: 'noopener noreferrer'
2019-07-24 13:59:38 -04:00
2019-05-29 12:43:07 -04:00
.form-group
.form-check
= f.check_box :dns_rebinding_protection_enabled, class: 'form-check-input'
= f.label :dns_rebinding_protection_enabled, class: 'form-check-label' do
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Enforce DNS rebinding attack protection')
2019-05-29 12:43:07 -04:00
%span.form-text.text-muted
2022-01-06 22:14:36 -05:00
= s_('OutboundRequests|Resolve IP addresses once and uses them to submit requests.')
2019-05-29 12:43:07 -04:00
2021-08-25 17:10:28 -04:00
= f.submit _('Save changes'), class: "gl-button btn btn-confirm", data: { qa_selector: 'save_changes_button' }