Skip to content

Require explicit allowlist in IdentityServerDescriptorProvider to prevent SSRF - #55

Merged
dujinhui merged 2 commits into
google:masterfrom
dujinhui:fix-ssrf-untrusted-key-discovery
Sep 11, 2026
Merged

Require explicit allowlist in IdentityServerDescriptorProvider to prevent SSRF#55
dujinhui merged 2 commits into
google:masterfrom
dujinhui:fix-ssrf-untrusted-key-discovery

Merge branch 'master' into fix-ssrf-untrusted-key-discovery

549c924
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Sep 11, 2026 in 21s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

✅ 549c924 Author: @dujinhui <du****ui​@gmail.com>
✅ 38c6ff5 Author: <du****ui​@google.com>

(Only the first commit for a unique contributor is listed.)

View more details on Google CLA