Enhance DNS rebinding protection in VirtualRegistries RedirectHandler

Roy Zwambagrequested to merge
rz-bump-ruby-jwt-2-10-3-18-11 into master

What does this MR do and why?

Enhance DNS rebinding protection in VirtualRegistries RedirectHandler

Merge branch 'security-fix-DNS-rebinding-SSRF-via-vreg-redirect-handler-18-11' into '18-11-stable-ee'

See merge request gitlab-org/security/gitlab!6101

Changelog: security

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports