better ip discrimination

This commit is contained in:
OniriCorpe 2024-01-18 03:06:27 +01:00
parent 8b38cf0924
commit 23b2f7d6bb

View file

@ -1549,6 +1549,8 @@ class Configurations(TestSuite):
( "0.0.0.0" in line or "::" in line )
and not line.strip().startswith(comment)
):
for ip in re.split("[ \t,='\"(){}\[\]]", line):
if ip == "::" or "0.0.0.0" in ip:
yield Info(
f"{filename}:{number}: Binding to '0.0.0.0' or '::' can result "
"in a security issue as the reverse proxy and the SSO can be "