diff --git a/internal/api/controller/webhook/common.go b/internal/api/controller/webhook/common.go index 2c144864f..459fc5d84 100644 --- a/internal/api/controller/webhook/common.go +++ b/internal/api/controller/webhook/common.go @@ -40,9 +40,9 @@ func checkURL(rawURL string, allowLoopback bool, allowPrivateNetwork bool) error // basic validation for loopback / private network addresses (only sanitary to give user an early error) // IMPORTANT: during webook execution loopback / private network addresses are blocked (handles DNS resolution) // - //if host == "localhost" { - // return check.NewValidationError("localhost is not allowed.") - //} + if host == "localhost" { + return check.NewValidationError("localhost is not allowed.") + } if ip := net.ParseIP(host); ip != nil { if !allowLoopback && ip.IsLoopback() {