aboutsummaryrefslogtreecommitdiffhomepage
path: root/share
diff options
context:
space:
mode:
Diffstat (limited to 'share')
-rwxr-xr-xshare/tools/web_config/webconfig.py12
1 files changed, 11 insertions, 1 deletions
diff --git a/share/tools/web_config/webconfig.py b/share/tools/web_config/webconfig.py
index 1236885d..e5915ebd 100755
--- a/share/tools/web_config/webconfig.py
+++ b/share/tools/web_config/webconfig.py
@@ -411,6 +411,16 @@ class BindingParser:
return readable_command + result
+class FishConfigTCPServer(SocketServer.TCPServer):
+ """TCPServer that only accepts connections from localhost (IPv4/IPv6)."""
+ WHITELIST = set(['::1', '::ffff:127.0.0.1', '127.0.0.1'])
+
+ address_family = socket.AF_INET6
+
+ def verify_request(self, request, client_address):
+ return client_address[0] in FishConfigTCPServer.WHITELIST
+
+
class FishConfigHTTPRequestHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):
def write_to_wfile(self, txt):
@@ -812,7 +822,7 @@ PORT = 8000
while PORT <= 9000:
try:
Handler = FishConfigHTTPRequestHandler
- httpd = SocketServer.TCPServer(("127.0.0.1", PORT), Handler)
+ httpd = FishConfigTCPServer(("::", PORT), Handler)
# Success
break
except socket.error: