hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix(mrf): match domain rules literally

Browse source 
Escape the domain so `.` only matches a dot, and use an optional
group for the `*.` prefix, which matches the same hosts without
exponential backtracking. Bad entries now match nothing instead of
raising on every check.
This commit is contained in:
Lain Soykaf 2026-10-31 13:17:50 +04:00
commit 7e157d8cc9
No known key found for this signature in database
3 changed files with 27 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/mrf-domain-regex-escape.security Normal file
View file

@ -0,0 +1 @@
MRF domain rules now match dots literally, so a rule for `good.example` no longer also matches `goodxexample`, and wildcard rules no longer backtrack on hostile host names