Fix incomplete disallowed remote addresses list SSRF

# Conflicts: # install/index.php
mybb · May 1, 2024 · c81b722 · c81b722
1 parent be4d223
commit c81b722
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/inc/src/Maintenance/functions_data.php b/inc/src/Maintenance/functions_data.php
@@ -173,7 +173,8 @@ function writeConfigurationFile(array $config): void
      */
 
     \$config['disallowed_remote_addresses'] = array(
-        '127.0.0.1',
+        '0.0.0.0',
+        '127.0.0.0/8',
         '10.0.0.0/8',
         '172.16.0.0/12',
         '192.168.0.0/16',