From d77cb4e52215b377127aac0317261237bc10a87a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=A4=A7=E7=9F=B3=E5=A4=B4?= Date: Sun, 27 Jul 2025 17:29:51 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9C=AC=E5=9C=B0=E5=9C=B0=E5=9D=80=E4=B8=8D?= =?UTF-8?q?=E5=85=81=E8=AE=B8=E8=B7=B3=E8=BD=AC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs b/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs index 2c29ac19..8a220d6d 100644 --- a/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs +++ b/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs @@ -28,6 +28,10 @@ public static class MiddlewareHelper (u.Host.IsNullOrEmpty() || uri.Host.EqualIgnoreCase(u.Host)) && (u.Port == 0 || u.Port == uri.Port)) return false; + // 本地地址不允许跳转 + if (uri.Host.EqualIgnoreCase("localhost", "127.0.0.1")) return false; + if (uri.Host.IsMatch("127.*")) return false; + using var span = DefaultTracer.Instance?.NewSpan("ForceRedirect", uri + ""); span?.AppendTag($"规则:{set.ForceRedirect}");