From d10107739b9ed6a50165e5dd1dfae15c7e8aea56 Mon Sep 17 00:00:00 2001 From: Mark McDowall Date: Sat, 25 Oct 2025 19:18:43 -0700 Subject: [PATCH] Set known networks to RFC 1918 ranges during startup --- src/NzbDrone.Host/Startup.cs | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/NzbDrone.Host/Startup.cs b/src/NzbDrone.Host/Startup.cs index ecf50e427..315007a34 100644 --- a/src/NzbDrone.Host/Startup.cs +++ b/src/NzbDrone.Host/Startup.cs @@ -1,6 +1,7 @@ using System; using System.Collections.Generic; using System.IO; +using System.Net; using DryIoc; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Builder; @@ -59,8 +60,9 @@ public void ConfigureServices(IServiceCollection services) services.Configure(options => { options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto | ForwardedHeaders.XForwardedHost; - options.KnownNetworks.Clear(); - options.KnownProxies.Clear(); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("10.0.0.0"), 8)); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("172.16.0.0"), 12)); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("192.168.0.0"), 16)); }); services.AddRouting(options => options.LowercaseUrls = true);