mirror of
https://github.com/movixcorp/MovixOpenSource.git
synced 2026-07-28 06:02:13 +00:00
39b5ba86f2
- Add domain whitelist (ALLOWED_DOMAINS) for known streaming/CDN hosts - Block requests to private IP ranges (RFC 1918, localhost, link-local, etc.) - Validate DNS resolution to prevent DNS rebinding attacks - Check both direct IP URLs and resolved IPs for non-whitelisted domains - Log blocked SSRF attempts for monitoring This prevents the open proxy from being used to access internal services (SSRF), metadata endpoints (cloud vendors), or private network infrastructure. |
||
|---|---|---|
| .. | ||
| admin.js | ||
| adminOauthApps.js | ||
| animeSama.js | ||
| authRoutes.js | ||
| coflix.js | ||
| cpasmal.js | ||
| darkiworld.js | ||
| debrid.js | ||
| download.js | ||
| downloadLinksLeaderboard.js | ||
| dragiv.js | ||
| francetv.js | ||
| frenchstream.js | ||
| fstream.js | ||
| helpFeedback.js | ||
| oauth.js | ||
| profiles.js | ||
| proxy.js | ||
| purstream.js | ||
| search.js | ||
| sessions.js | ||
| sync.js | ||
| tmdb.js | ||
| topstream.js | ||
| vipDonations.js | ||
| vipPayblis.js | ||
| voirdrama.js | ||
| wiflix.js | ||