fix: log request port instead since it's more relevant to the admin

Signed-off-by: Josh <josh.t.richards@gmail.com>
This commit is contained in:
Josh 2025-01-30 19:31:27 -05:00 committed by GitHub
parent e07c89d0e2
commit a1be491c27
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -110,15 +110,15 @@ class DnsPinMiddleware {
}
$hostName = (string)$request->getUri()->getHost();
$port = $request->getUri()->getPort();
$requestPort = $request->getUri()->getPort();
$ports = [
'80',
'443',
];
if ($port !== null) {
$ports[] = (string)$port;
if ($requestPort !== null) {
$ports[] = (string)$requestPort;
}
$targetIps = $this->dnsResolve(idn_to_utf8($hostName), 0);
@ -135,7 +135,8 @@ class DnsPinMiddleware {
foreach ($targetIps as $ip) {
if ($this->ipAddressClassifier->isLocalAddress($ip)) {
// TODO: continue with all non-local IPs?
throw new LocalServerException('Host "' . $ip . '" (' . $hostName . ') violates local access rules');
// log requestPort because that's more relevant to the admin
throw new LocalServerException('Host "' . $ip . '" (' . $hostName . ':' . $requestPort . ') violates local access rules');
}
$curlResolves["$hostName:$port"][] = $ip;
}