1
0

RemoteHostValidator.php 2.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576
  1. <?php
  2. declare(strict_types=1);
  3. /*
  4. * @copyright 2022 Christoph Wurst <christoph@winzerhof-wurst.at>
  5. *
  6. * @author 2022 Christoph Wurst <christoph@winzerhof-wurst.at>
  7. *
  8. * @license GNU AGPL version 3 or any later version
  9. *
  10. * This program is free software: you can redistribute it and/or modify
  11. * it under the terms of the GNU Affero General Public License as
  12. * published by the Free Software Foundation, either version 3 of the
  13. * License, or (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. * GNU Affero General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU Affero General Public License
  21. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  22. */
  23. namespace OC\Security;
  24. use OC\Net\HostnameClassifier;
  25. use OC\Net\IpAddressClassifier;
  26. use OCP\IConfig;
  27. use OCP\Security\IRemoteHostValidator;
  28. use Psr\Log\LoggerInterface;
  29. use function strpos;
  30. use function strtolower;
  31. use function substr;
  32. use function urldecode;
  33. /**
  34. * @internal
  35. */
  36. final class RemoteHostValidator implements IRemoteHostValidator {
  37. private IConfig $config;
  38. private HostnameClassifier $hostnameClassifier;
  39. private IpAddressClassifier $ipAddressClassifier;
  40. private LoggerInterface $logger;
  41. public function __construct(IConfig $config,
  42. HostnameClassifier $hostnameClassifier,
  43. IpAddressClassifier $ipAddressClassifier,
  44. LoggerInterface $logger) {
  45. $this->config = $config;
  46. $this->hostnameClassifier = $hostnameClassifier;
  47. $this->ipAddressClassifier = $ipAddressClassifier;
  48. $this->logger = $logger;
  49. }
  50. public function isValid(string $host): bool {
  51. if ($this->config->getSystemValueBool('allow_local_remote_servers', false)) {
  52. return true;
  53. }
  54. $host = idn_to_utf8(strtolower(urldecode($host)));
  55. // Remove brackets from IPv6 addresses
  56. if (strpos($host, '[') === 0 && substr($host, -1) === ']') {
  57. $host = substr($host, 1, -1);
  58. }
  59. if ($this->hostnameClassifier->isLocalHostname($host)
  60. || $this->ipAddressClassifier->isLocalAddress($host)) {
  61. $this->logger->warning("Host $host was not connected to because it violates local access rules");
  62. return false;
  63. }
  64. return true;
  65. }
  66. }