From 31fea8b33d6d31ab5e547ef5cd18aa48427b8680 Mon Sep 17 00:00:00 2001 From: Allan Guwatudde Date: Thu, 4 Apr 2024 17:21:13 +0300 Subject: [PATCH] Add doc --- proxyfilters/blocklocal.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/proxyfilters/blocklocal.go b/proxyfilters/blocklocal.go index 65969114..41e75c78 100644 --- a/proxyfilters/blocklocal.go +++ b/proxyfilters/blocklocal.go @@ -45,6 +45,8 @@ func BlockLocal(exceptions []string) filters.Filter { } } + // Note: It is important to pass Host as an already resolved and vetted IP in order to avoid + // DNS rebind attacks should there be any other dialers, that attempt to resolve the host down in the execution path req.URL.Host = fmt.Sprintf("%s:%s", ipAddr.String(), port) return next(cs, req)