head	1.2;
access;
symbols;
locks; strict;
comment	@# @;


1.2
date	2026.09.09.14.09.32;	author taca;	state Exp;
branches;
next	1.1;
commitid	7J6qC4BkFWDqaXUG;

1.1
date	2026.07.20.05.27.56;	author taca;	state Exp;
branches;
next	;
commitid	PPLhcWjgarw5VlOG;


desc
@@


1.2
log
@security/ruby-ssrf_filter: update to 1.6.0

1.6.0 (2026-09-08)

* Ignore proxies (arkadiyt)
* Filter out some IPv6 ranges (arkadiyt)
* Filter out some dummy rnages (arkadiyt)
* Retry connection failures with differnet ips (arkadiyt)
@
text
@# $NetBSD: Makefile,v 1.1 2026/07/20 05:27:56 taca Exp $

DISTNAME=	ssrf_filter-1.6.0
CATEGORIES=	security

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://github.com/arkadiyt/ssrf_filter
COMMENT=	Make it easy to prevent SSRF attacks
LICENSE=	mit

USE_LANGUAGES=	# none

.include "../../lang/ruby/gem.mk"
.include "../../mk/bsd.pkg.mk"
@


1.1
log
@security/ruby-ssrf_filter: add version 1.5.0

This package is required by newer version of www/ruby-css-parser package.


ssrf_filter makes it easy to defend against server side request forgery
(SSRF) attacks.  SSRF vulnerabilities happen when you accept URLs as user
input and fetch them on your server (for instance, when a user enters a link
into a Twitter/Facebook status update and a content preview is generated).

Users can pass in URLs or IPs such that your server will make requests to
the internal network.  For example if you're hosted on AWS they can request
the instance metadata endpoint http://169.254.169.254/latest/meta-data/ and
get your IAM credentials.

Attempts to guard against this are often implemented incorrectly, by
blocking all ip addresses, not handling IPv6 or http redirects correctly, or
having TOCTTOU bugs and other issues.

This gem provides a safe and easy way to fetch content from user-submitted
urls. It:

* handles URIs/IPv4/IPv6, redirects, DNS, etc, correctly
* has 0 runtime dependencies
* has a comprehensive test suite (100% code coverage)
* is tested against ruby 2.7, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 4.0, and
  ruby-head
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	ssrf_filter-1.5.0
@