gitlab-org--gitlab-foss/changelogs/unreleased/dm-http-hostname-override.yml

---
title: Protect Gitlab::HTTP against DNS rebinding attack
merge_request:
author:
type: security
Protect Gitlab::HTTP against DNS rebinding attack Gitlab::HTTP now resolves the hostname only once, verifies the IP is not blocked, and then uses the same IP to perform the actual request, while passing the original hostname in the `Host` header and SSL SNI field. 2019-04-21 10:03:26 +00:00			`---`
			`title: Protect Gitlab::HTTP against DNS rebinding attack`
			`merge_request:`
			`author:`
			`type: security`