Repository navigation

Security: Prevent DNS rebinding in link checker - refs GHSA-ggx3-h674-xqq3 - #9272

Merged

christianbeeznest merged 1 commit into

chamilo:1.11.xfrom

christianbeeznest:security/GHSA-ggx3-h674-xqq3-1.11.x

Oct 19, 2026

Merged

Security: Prevent DNS rebinding in link checker - refs GHSA-ggx3-h674-xqq3#9272
christianbeeznest merged 1 commit into
chamilo:1.11.xfrom
christianbeeznest:security/GHSA-ggx3-h674-xqq3-1.11.x

christianbeeznest commented Oct 19, 2026

Contributor

Fixes GHSA-ggx3-h674-xqq3 for the 1.11.x branch.

Prevent DNS rebinding SSRF in the legacy course link checker.
Pin outgoing connections to validated public IP addresses.
Preserve secure HTTP/HTTPS handling and validate redirect destinations.
Prevent proxy-based DNS resolution bypasses.
Add regression tests for URL validation and connection security.

Validation:

PHP syntax checks passed.
PHPUnit: 5 tests passed, 26 assertions.
Git diff checks passed.
Live DNS-rebinding testing remains pending.

Refs GHSA-ggx3-h674-xqq3


          Security: Prevent DNS rebinding in link checker

03a42f3

christianbeeznest merged commit b0ef90e into chamilo:1.11.x

2 of 4 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet