MDL-61143 core_files: Block hosts that cannot be determined to be an IP address of...
authorCameron Ball <cameron@moodle.com>
Wed, 3 Jan 2018 08:09:49 +0000 (16:09 +0800)
committerMr. Jenkins (CiBoT) <cibot@moodle.org>
Tue, 9 Jan 2018 08:54:32 +0000 (16:54 +0800)
commitfbe7f1f8ba8fac554d0db657f1e07aca6308992f
treeae943b72648910fa7cec991c4253338da7b86e4d
parentcae2eb357d15dc056a79e53f4f035eee1d3db221
MDL-61143 core_files: Block hosts that cannot be determined to be an IP address of domain name

Freaky deaky Unicode/octal/hex domains can be resolved by cURL but are technically not valid.

This patch causes anything that Moodle does not consider to be a valid domain or IP to be blocked
by the cURL security helper.
lib/classes/files/curl_security_helper.php