gitlab-org--gitlab-foss/changelogs/unreleased/security-ssrf-kubernetes-dns.yml
Thong Kuah e0826b0cb5 Override hostname when connecting via Kubeclient
Kubeclient uses rest-client. We hack into to access the net/http object
so that we can patch to connect to the resolved IP + set
hostname_override.

Add specs for discord. The discord integration also uses rest-client, so
since we patched rest-client, spec that the DNS rebinding protection
works
2019-08-21 10:49:22 +12:00

5 lines
102 B
YAML

---
title: Fix SSRF via DNS rebinding in Kubernetes Integration
merge_request:
author:
type: security