Skip to content

[stable35] fix(matterbridge): validate the server domain for the matterbridge on each use to prevent DNS rebinding - #19824

Merged
sudormant merged 1 commit into
stable35from
backport/19820/stable35
Oct 13, 2026
Merged

sudormant merged 1 commit into
stable35from
backport/19820/stable35

Conversation

@backportbot

@backportbot backportbot Bot commented Oct 13, 2026

Copy link
Copy Markdown

Backport of PR #19820

… each use to prevent DNS rebinding

Signed-off-by: Christian Lorang <christian.lorang@nextcloud.com>
@backportbot backportbot Bot added bug feature: integration 📦 Integration with 3rd party (chat) service 3. to review labels Oct 13, 2026
@backportbot backportbot Bot added this to the ⛅ Next Patch (35) milestone Oct 13, 2026
@sudormant
sudormant merged commit d1bee07 into stable35 Oct 13, 2026
74 checks passed
@sudormant
sudormant deleted the backport/19820/stable35 branch October 13, 2026 15:16
@Antreesy Antreesy modified the milestones: ⛅ Next Patch (35), v25.0.6 Oct 15, 2026

// check if current $bridge parts (domain) are still valid before doing anything
try {
$this->validateParts($bridge); // no return needed, validateParts will throw exception

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this should be validateParts($bridge[parts]) otherwise validation always fails (on my machine at least.
$bridge looks like: ['enabled' => false, 'pid' => 0, 'parts' => []]
The validator only wants the [] inside 'parts'. (

if ($part['skiptls']) {
$content .= ' SkipTLSVerify = true' . "\n";
}
$content .= ' PrefixMessagesWithNick = true' . "\n";
$content .= ' RemoteNickFormat = "[{PROTOCOL}] <{NICK}> "' . "\n\n";
)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, thank you very much for your report!
This indeed slipped my tests before, but I confirmed the parts is missing here.
I created a new PR and will backport:
#20052

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug feature: integration 📦 Integration with 3rd party (chat) service

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants