1
0
mirror of https://github.com/bitwarden/browser synced 2025-12-06 00:13:28 +00:00

[PM-25250] Prevent configuration and access of self hosted urls over http (#17095)

* feat: ban urls not using https

* feat: add exception for dev env

* feat: block fetching of insecure URLs

* feat: add exception for dev env

* feat: block notifications from using insecure URL

* fix: bug where submission was possible regardless of error

* feat: add exception for dev env

* fix: missing constructor param
This commit is contained in:
Andreas Coroiu
2025-10-31 08:12:44 +01:00
committed by GitHub
parent 2dd314e992
commit 48fb8b2bfe
11 changed files with 106 additions and 11 deletions

View File

@@ -1641,6 +1641,9 @@
"selfHostedEnvFormInvalid": {
"message": "You must add either the base Server URL or at least one custom environment."
},
"selfHostedEnvMustUseHttps": {
"message": "URLs must use HTTPS."
},
"customEnvironment": {
"message": "Custom environment"
},

View File

@@ -1215,7 +1215,7 @@ export default class MainBackground {
logoutCallback,
this.messagingService,
this.accountService,
new SignalRConnectionService(this.apiService, this.logService),
new SignalRConnectionService(this.apiService, this.logService, this.platformUtilsService),
this.authService,
this.webPushConnectionService,
this.authRequestAnsweringService,

View File

@@ -1035,6 +1035,9 @@
"selfHostedEnvFormInvalid": {
"message": "You must add either the base Server URL or at least one custom environment."
},
"selfHostedEnvMustUseHttps": {
"message": "URLs must use HTTPS."
},
"customEnvironment": {
"message": "Custom environment"
},

View File

@@ -7132,6 +7132,9 @@
"selfHostedEnvFormInvalid": {
"message": "You must add either the base Server URL or at least one custom environment."
},
"selfHostedEnvMustUseHttps": {
"message": "URLs must use HTTPS."
},
"apiUrl": {
"message": "API server URL"
},