Skip to content

[FIX] SafePorts: Ports 80, 8080 & 443 linked to respective protocols (#16108)#16108

Merged
ggazzo merged 3 commits intodevelopfrom
fix/safe_port_http_s
Jan 6, 2020
Merged

[FIX] SafePorts: Ports 80, 8080 & 443 linked to respective protocols (#16108)#16108
ggazzo merged 3 commits intodevelopfrom
fix/safe_port_http_s

Conversation

@gabriellsh
Copy link
Member

Closes #9849

Now whenever there is no port defined in the URL, HTTP will be treated as 80, 8080, and HTTPS as 443, thus making it possible to block embedding of these ports through the "Safe Ports" setting in the admin menu.

@ggazzo ggazzo force-pushed the fix/safe_port_http_s branch from beeffe7 to a47ff4a Compare January 6, 2020 12:01
@ggazzo
Copy link
Member

ggazzo commented Jan 6, 2020

@gabriellsh please check if do you agree with the changes ;)

ggazzo
ggazzo previously approved these changes Jan 6, 2020
@ggazzo ggazzo added this to the 3.0.0 milestone Jan 6, 2020
@gabriellsh
Copy link
Member Author

@gabriellsh please check if do you agree with the changes ;)

Looks good to me!

@ggazzo ggazzo changed the title [FIX] Ports 80, 8080 & 443 linked to respective protocols [FIX] SafePorts: Ports 80, 8080 & 443 linked to respective protocols (#16108) Jan 6, 2020
@ggazzo ggazzo merged commit e88d930 into develop Jan 6, 2020
gabriellsh added a commit that referenced this pull request Jan 9, 2020
…default-favorite-channels

* 'develop' of github.com:RocketChat/Rocket.Chat: (31 commits)
  fix space
  update on mongo, node and caddy
  [NEW] Enforce plain text emails converting from HTML when no text version supplied (#16063)
  [IMPROVE] Status Text form validation (#16121)
  [FIX] auto translate cache (#15768)
  [FIX] Save new password without confirmation (#16060)
  Disable PR Docker image build (#16141)
  [IMPROVE] Set the color of the cancel button on modals to #bdbebf for enhanced  visibiity (#15913)
  [FIX] Break message-attachment text to the next line (#16039)
  [IMPROVE] Remove NRR (#16071)
  Add Cloud Info to translation dictionary (#16122)
  [FIX] Resolving console errors Administrations (#16139)
  [FIX] SafePorts: Ports 80, 8080 & 443 linked to respective protocols (#16108)
  [FIX] Drag and drop disabled when file upload is disabled (#16049)
  [FIX] Video message sent to wrong room (#16113)
  [FIX] "User not found" for direct messages (#16047)
  [BREAK] Removed room counter from sidebar (#16036)
  [FIX] Embedded style when using 'go' command  (#16051)
  [NEW]  Setting Top navbar in embedded mode (#16064)
  [FIX] Thread message icon overlapping text (#16083)
  ...
@sampaiodiego sampaiodiego mentioned this pull request Feb 15, 2020
@sampaiodiego sampaiodiego deleted the fix/safe_port_http_s branch February 21, 2020 14:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

"Safe Ports" feature cannot restrict port 80 or 443 (or any other implicit port derived from the scheme of a URL)

2 participants