diff options
| author | Justin Clark-Casey (justincc) | 2015-03-04 17:43:00 +0000 |
|---|---|---|
| committer | Justin Clark-Casey (justincc) | 2015-03-04 18:27:50 +0000 |
| commit | 7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda (patch) | |
| tree | e50126a4e6c23ac747bf0842774538dc731d2d85 /prebuild.xml | |
| parent | usability fixes for LSL API (diff) | |
| download | opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.zip opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.gz opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.bz2 opensim-SC_OLD-7d3bafd5abf22f5c1ea3c3d8918d9b8177693bda.tar.xz | |
Add outbound URL filter to llHttpRequest() and osSetDynamicTextureURL*() script functions.
This is to address an issue where HTTP script functions could make calls to localhost and other endpoints inside the simulator's LAN.
By default, calls to all private addresses are now blocked as per http://en.wikipedia.org/wiki/Reserved_IP_addresses
If you require exceptions to this, configure [Network] OutboundDisallowForUserScriptsExcept in OpenSim.ini
Diffstat (limited to 'prebuild.xml')
| -rw-r--r-- | prebuild.xml | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/prebuild.xml b/prebuild.xml index 771b7c7..a0b33b6 100644 --- a/prebuild.xml +++ b/prebuild.xml | |||
| @@ -593,6 +593,7 @@ | |||
| 593 | 593 | ||
| 594 | <ReferencePath>../../../bin/</ReferencePath> | 594 | <ReferencePath>../../../bin/</ReferencePath> |
| 595 | <Reference name="System"/> | 595 | <Reference name="System"/> |
| 596 | <Reference name="System.Core"/> | ||
| 596 | <Reference name="System.Xml"/> | 597 | <Reference name="System.Xml"/> |
| 597 | <Reference name="System.Web"/> | 598 | <Reference name="System.Web"/> |
| 598 | <Reference name="OpenSim.Data"/> | 599 | <Reference name="OpenSim.Data"/> |
| @@ -607,6 +608,7 @@ | |||
| 607 | <Reference name="OpenMetaverse.StructuredData" path="../../../bin/"/> | 608 | <Reference name="OpenMetaverse.StructuredData" path="../../../bin/"/> |
| 608 | <!-- FIXME: The OpenMetaverse.dll reference can be dropped when the TransferRequestPacket reference is removed from the code --> | 609 | <!-- FIXME: The OpenMetaverse.dll reference can be dropped when the TransferRequestPacket reference is removed from the code --> |
| 609 | <Reference name="OpenMetaverse" path="../../../bin/"/> | 610 | <Reference name="OpenMetaverse" path="../../../bin/"/> |
| 611 | <Reference name="LukeSkywalker.IPNetwork" path="../../../bin/"/> | ||
| 610 | <Reference name="Nini" path="../../../bin/"/> | 612 | <Reference name="Nini" path="../../../bin/"/> |
| 611 | <Reference name="XMLRPC" path="../../../bin/"/> | 613 | <Reference name="XMLRPC" path="../../../bin/"/> |
| 612 | <Reference name="log4net" path="../../../bin/"/> | 614 | <Reference name="log4net" path="../../../bin/"/> |