mirror of
https://github.com/bitwarden/browser
synced 2025-12-06 00:13:28 +00:00
[PM-25250] Prevent configuration and access of self hosted urls over http (#17095)
* feat: ban urls not using https * feat: add exception for dev env * feat: block fetching of insecure URLs * feat: add exception for dev env * feat: block notifications from using insecure URL * fix: bug where submission was possible regardless of error * feat: add exception for dev env * fix: missing constructor param
This commit is contained in:
@@ -1641,6 +1641,9 @@
|
||||
"selfHostedEnvFormInvalid": {
|
||||
"message": "You must add either the base Server URL or at least one custom environment."
|
||||
},
|
||||
"selfHostedEnvMustUseHttps": {
|
||||
"message": "URLs must use HTTPS."
|
||||
},
|
||||
"customEnvironment": {
|
||||
"message": "Custom environment"
|
||||
},
|
||||
|
||||
@@ -1215,7 +1215,7 @@ export default class MainBackground {
|
||||
logoutCallback,
|
||||
this.messagingService,
|
||||
this.accountService,
|
||||
new SignalRConnectionService(this.apiService, this.logService),
|
||||
new SignalRConnectionService(this.apiService, this.logService, this.platformUtilsService),
|
||||
this.authService,
|
||||
this.webPushConnectionService,
|
||||
this.authRequestAnsweringService,
|
||||
|
||||
@@ -1035,6 +1035,9 @@
|
||||
"selfHostedEnvFormInvalid": {
|
||||
"message": "You must add either the base Server URL or at least one custom environment."
|
||||
},
|
||||
"selfHostedEnvMustUseHttps": {
|
||||
"message": "URLs must use HTTPS."
|
||||
},
|
||||
"customEnvironment": {
|
||||
"message": "Custom environment"
|
||||
},
|
||||
|
||||
@@ -7132,6 +7132,9 @@
|
||||
"selfHostedEnvFormInvalid": {
|
||||
"message": "You must add either the base Server URL or at least one custom environment."
|
||||
},
|
||||
"selfHostedEnvMustUseHttps": {
|
||||
"message": "URLs must use HTTPS."
|
||||
},
|
||||
"apiUrl": {
|
||||
"message": "API server URL"
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user