本地地址不允许跳转

2025-07-27 17:29:51 +08:00 · 2025-07-27 17:29:51 +08:00 · d77cb4e522
parent 2f96210a70
commit d77cb4e522
1 changed files with 4 additions and 0 deletions
--- a/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs
+++ b/NewLife.CubeNC/WebMiddleware/MiddlewareHelper.cs
@ -28,6 +28,10 @@ public static class MiddlewareHelper
            (u.Host.IsNullOrEmpty() || uri.Host.EqualIgnoreCase(u.Host)) &&
            (u.Port == 0 || u.Port == uri.Port)) return false;

+        // 本地地址不允许跳转
+        if (uri.Host.EqualIgnoreCase("localhost", "127.0.0.1")) return false;
+        if (uri.Host.IsMatch("127.*")) return false;
+
        using var span = DefaultTracer.Instance?.NewSpan("ForceRedirect", uri + "");
        span?.AppendTag($"规则：{set.ForceRedirect}");