From a81de48cfbc2bc44ccec744dcd07e623b077fb37 Mon Sep 17 00:00:00 2001 From: Athou Date: Wed, 18 Feb 2026 20:53:23 +0100 Subject: [PATCH] change the default value of blockLocalAddresses --- .../src/main/java/com/commafeed/CommaFeedConfiguration.java | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/commafeed-server/src/main/java/com/commafeed/CommaFeedConfiguration.java b/commafeed-server/src/main/java/com/commafeed/CommaFeedConfiguration.java index b368b6e3..06336404 100644 --- a/commafeed-server/src/main/java/com/commafeed/CommaFeedConfiguration.java +++ b/commafeed-server/src/main/java/com/commafeed/CommaFeedConfiguration.java @@ -144,10 +144,9 @@ public interface CommaFeedConfiguration { * Prevent access to local addresses to mitigate server-side request forgery (SSRF) attacks, which could potentially expose internal * resources. * - * You may want to disable this if you subscribe to feeds that are only available on your local network and you trust all users of - * your CommaFeed instance. + * You may want to enable this if you host a public instance of CommaFeed with regisration open. */ - @WithDefault("true") + @WithDefault("false") boolean blockLocalAddresses(); /**