diff options
| author | Justin Clark-Casey (justincc) | 2015-03-04 17:43:00 +0000 |
|---|---|---|
| committer | Justin Clark-Casey (justincc) | 2015-03-04 18:27:50 +0000 |
| commit | 7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda (patch) | |
| tree | e50126a4e6c23ac747bf0842774538dc731d2d85 /OpenSim/Framework/ServiceAuth/CompoundAuthentication.cs | |
| parent | usability fixes for LSL API (diff) | |
| download | opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.zip opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.gz opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.bz2 opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.xz | |
Add outbound URL filter to llHttpRequest() and osSetDynamicTextureURL*() script functions.
This is to address an issue where HTTP script functions could make calls to localhost and other endpoints inside the simulator's LAN.
By default, calls to all private addresses are now blocked as per http://en.wikipedia.org/wiki/Reserved_IP_addresses
If you require exceptions to this, configure [Network] OutboundDisallowForUserScriptsExcept in OpenSim.ini
Diffstat (limited to 'OpenSim/Framework/ServiceAuth/CompoundAuthentication.cs')
0 files changed, 0 insertions, 0 deletions