Skip to content

Commit b943567

Browse files
liqiang-fit2cloudliuruibin
authored andcommitted
fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox.
1 parent 92167a9 commit b943567

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

installer/Dockerfile-base

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ ENV PATH=/opt/py3/bin:$PATH \
4646
MAXKB_SANDBOX=1 \
4747
MAXKB_SANDBOX_HOME=/opt/maxkb-app/sandbox \
4848
MAXKB_SANDBOX_PYTHON_PACKAGE_PATHS="/opt/py3/lib/python3.11/site-packages,/opt/maxkb-app/sandbox/python-packages,/opt/maxkb/python-packages" \
49-
MAXKB_SANDBOX_PYTHON_BANNED_HOSTS="127.0.0.0/8,localhost,host.docker.internal,172.17.0.0/16,maxkb,pgsql,redis,172.31.250.192/26,0.0.0.0/32,::1/128" \
49+
MAXKB_SANDBOX_PYTHON_BANNED_HOSTS="127.0.0.0/8,localhost,host.docker.internal,172.17.0.0/16,maxkb,pgsql,redis,172.31.250.192/26,0.0.0.0/32,::/0" \
5050
MAXKB_ADMIN_PATH=/admin
5151

5252
EXPOSE 6379

0 commit comments

Comments
 (0)