dify/docker/ssrf_proxy/.gitignore
-LAN- 1a49febc02
chore: harden SSRF proxy configuration with strict defaults
- Block all private/internal networks by default to prevent SSRF attacks
- Restrict ports to only HTTP (80) and HTTPS (443)
- Deny all requests by default unless explicitly whitelisted
- Add customization support via conf.d directory for local overrides
- Provide example configurations for common use cases
- Add CI/testing setup script to ensure tests pass with strict config
- Update docker-compose files to support custom config mounting
- Add comprehensive documentation with security warnings
2025-09-01 13:45:07 +08:00

2 lines
80 B
Plaintext

# Ignore the conf.d directory that's created for testing/local overrides
conf.d/