Open-source IoT Platform - Device management, data collection, processing and visualization.

dashboard java cloud coap iot iot-analytics iot-platform iot-solutions kafka lwm2m microservices middleware mqtt netty platform snmp thingsboard visualization websockets widgets

Viacheslav Klimov ae8246fc60 Fix SSRF DNS rebinding bypass, add allow-list, protect additional HTTP vectors Add SsrfSafeAddressResolverGroup that validates resolved IPs at Netty connection time, eliminating the TOCTOU gap where DNS rebinding domains resolve to safe IPs during validation but to private/metadata IPs at connection time. Disable HTTP redirects in TbHttpClient to prevent redirect-based SSRF bypass. Add allow-list support (SSRF_ALLOWED_HOSTS) to SsrfProtectionValidator so customers with IoT devices on private networks can whitelist specific addresses or CIDR ranges while keeping SSRF protection enabled. Add SSRF validation to MS Teams webhook, custom OAuth2 mapper, and GitHub OAuth2 mapper endpoints. Log a warning when SSRF protection is disabled.		3 months ago
.github	Add Security category to release changelog	3 months ago
application	Fix SSRF DNS rebinding bypass, add allow-list, protect additional HTTP vectors	3 months ago
common	Fix SSRF DNS rebinding bypass, add allow-list, protect additional HTTP vectors	3 months ago
dao	Refactor dao and netty-mqtt to inherit maven-jar-plugin version from pluginManagement	3 months ago
docker	Update license header	5 months ago
edqs	Version set to 4.2.2.1-SNAPSHOT	3 months ago
img	Fix typo in docker README's.	8 years ago
monitoring	Version set to 4.2.2.1-SNAPSHOT	3 months ago
msa	Version set to 4.2.2.1-SNAPSHOT	3 months ago
netty-mqtt	Refactor dao and netty-mqtt to inherit maven-jar-plugin version from pluginManagement	3 months ago
packaging	Update license header	5 months ago
rest-client	Version set to 4.2.2.1-SNAPSHOT	3 months ago
rule-engine	Fix SSRF DNS rebinding bypass, add allow-list, protect additional HTTP vectors	3 months ago
tools	Version set to 4.2.2.1-SNAPSHOT	3 months ago
transport	Version set to 4.2.2.1-SNAPSHOT	3 months ago
ui-ngx	Update locale translations for 13 languages	3 months ago
.gitignore	Add .planning of GSD to gitignore	3 months ago
LICENSE	Initial commit	10 years ago
README.md	Update README.md	1 year ago
TEST_FAST.md	mvn test with -Dtest ignores -Dsurefire.excludes so the exclusions should be inlined like -Dtest='!/nosql/,org.thingsboard.server.controller.**'	4 months ago
build.sh	Update license header	5 months ago
build_proto.sh	Update license header	5 months ago
license-header-template.txt	Update license header	5 months ago
lombok.config	jwt settings code cleanup	4 years ago
pom.xml	Merge pull request #15248 from thingsboard/fix/gradle-parallel-cache-isolation	3 months ago
pull_request_template.md	added missed yml parameter descriptions, script that check description exists for all parameters, added github action that run script	3 years ago
security.md	fixed typo	3 years ago