zefie/minisrv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

block ips in vhost

Browse Source
This commit is contained in:
zefie
2025-06-15 01:03:31 -04:00
parent 39a0aa76c7
commit 13d6a06ffa
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
zefie_wtvp_minisrv/includes/classes/WTVIRC.js
View File

@@ -1264,6 +1264,13 @@ class WTVIRC {
socket.write(`:${this.servername} 501 ${socket.nickname} :Invalid VHost format\r\n`);
break;
}
// Prevent setting VHost to an IP address (IPv4 or IPv6)
const ipv4Pattern = /^(?:\d{1,3}\.){3}\d{1,3}$/;
const ipv6Pattern = /^([a-fA-F0-9:]+:+)+[a-fA-F0-9]+$/;
if (ipv4Pattern.test(newVHost) || ipv6Pattern.test(newVHost)) {
socket.write(`:${this.servername} 501 ${socket.nickname} :VHost cannot be an IP address\r\n`);
break;
}
dns.lookup(newVHost, (err, address) => {
if (!err && address) {
socket.write(`:${this.servername} 501 ${socket.nickname} :VHost must not resolve to a real IP (resolved to: ${address})\r\n`);