Package dev.relism.flash.ext.security

Class PublicUrl

java.lang.Object

dev.relism.flash.ext.security.PublicUrl

public final class PublicUrl
extends Object

The guard for a URL someone other than the operator chose — an identity provider an organization registers, a client's metadata document: fetching it must not become a request forgery against the server's own network.

Method Summary

Modifier and Type	Method	Description
static void	require(String url)	ponytail: resolved here and again by the HTTP client, so DNS rebinding between the two is not covered.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

require

public static void require(String url)
                    throws UnknownHostException

ponytail: resolved here and again by the HTTP client, so DNS rebinding between the two is not covered.

Throws:

IllegalArgumentException - url is not https, or one of its host's addresses is not public

UnknownHostException