mirror of https://github.com/langgenius/dify.git
23c97ec7f7
- Block all private/internal networks by default to prevent SSRF attacks - Restrict allowed ports to only HTTP (80) and HTTPS (443) - Remove default domain allowlists (e.g., marketplace.dify.ai) - Implement deny-all-by-default policy with explicit whitelisting - Add example configuration files for common customization scenarios - Provide comprehensive documentation for security configuration Fixes #24392 |
||
|---|---|---|
| .. | ||
| 10-allow-marketplace.conf.example | ||
| 20-allow-internal-services.conf.example | ||
| 30-allow-external-domains.conf.example | ||
| 40-allow-additional-ports.conf.example | ||