Closed webaddicto closed 7 years ago
Inside function proxify_url($url, $base_url = '') we make sure that: 1) The proxy cannot proxify "itself". 2) Allow only http, https, ftp in scheme on $url. 3) Not proxify localhost and internal IP addresses.
Good improvements for security reasons.
This can be closed, I made a simple SecurityPlugin and submitted the PR here: https://github.com/Athlon1600/php-proxy-plugin-bundle/pull/2
Inside function proxify_url($url, $base_url = '') we make sure that: 1) The proxy cannot proxify "itself". 2) Allow only http, https, ftp in scheme on $url. 3) Not proxify localhost and internal IP addresses.
Good improvements for security reasons.