diff --git a/CHANGELOG b/CHANGELOG index 86fcae9c6..b3a07fa00 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -19,6 +19,7 @@ Unreleased: mitmproxy next * Add new MapRemote addon to rewrite URLs of requests (@mplattner) * Add support for HTTP Trailers to the HTTP/2 protocol (@sanlengjingvv and @Kriechi) * Fix certificate runtime error during expire cleanup (@gorogoroumaru) + * Fixed the DNS Rebind Protection for secure support of IPv6 addresses (@tunnelpr0) * --- TODO: add new PRs above this line --- diff --git a/mitmproxy/tools/web/app.py b/mitmproxy/tools/web/app.py index cf07ae155..96679d690 100644 --- a/mitmproxy/tools/web/app.py +++ b/mitmproxy/tools/web/app.py @@ -499,7 +499,7 @@ class Application(tornado.web.Application): self.add_handlers("dns-rebind-protection", [(r"/.*", DnsRebind)]) self.add_handlers( # make mitmweb accessible by IP only to prevent DNS rebinding. - r'^(localhost|[0-9.:\[\]]+)$', + r'^(localhost|[0-9.]+|\[[0-9a-fA-F:]+\])$', [ (r"/", IndexHandler), (r"/filter-help(?:\.json)?", FilterHelp),