Fix broker diagnostics SSRF

2026-06-01 23:49:10 +02:00
parent e3b38519fb
commit cd4e3faea3
3 changed files with 37 additions and 21 deletions
@@ -79,7 +79,12 @@ class edgeGatewayConfigRoute
        }

        $payload = self::getParametersAsArray();
+        $diagnosticOptions = array_intersect_key($payload, array_flip([
+            'target',
+            'broker_auth_mode',
+            'broker_shared_secret',
+        ]));
        (new logs_o())->add('edgegateway_config', 'global', 1, $user->id, 'EDGEGATEWAY_BROKER_DIAGNOSTICS', 'Tested edge gateway broker config');
-        $response->success((new edge_gateway_manager())->diagnoseBrokerConfiguration($payload));
+        $response->success((new edge_gateway_manager())->diagnoseBrokerConfiguration($diagnosticOptions));
    }
 }