search

mozilla / page-metadata-service

DEPRECATED - A RESTful service that returns the metadata about a given URL.
Mozilla Public License 2.0
19 stars 8 forks source link

Add a remote URL blacklist #100

Closed jaredlockhart closed 7 years ago

jaredlockhart commented 7 years ago

We should add a black list of domains/hosts which we will not attempt to establish remote connections to. This can include private IP ranges, localhost, as well as known third party hosts/domains which pose a risk to either the service or its consumers.

jaredlockhart commented 7 years ago

We need to do some further research to determine whether we are able to restrict a node instances access to external web services and deny all access to internal AWS resources. We should file an AWS support ticket to verify this.

jaredlockhart commented 7 years ago

Fixed by #129