[fix] callback url validation (#2959)

2025-02-13 15:11:46 +02:00
parent b76d8b5458
commit bfa23568e3
14 changed files with 139 additions and 5 deletions
@@ -366,6 +366,9 @@ class SecuritySettings(LNbitsSettings):
    lnbits_rate_limit_unit: str = Field(default="minute")
    lnbits_allowed_ips: list[str] = Field(default=[])
    lnbits_blocked_ips: list[str] = Field(default=[])
+    lnbits_callback_url_rules: list[str] = Field(
+        default=["^(?!\\d+\\.\\d+\\.\\d+\\.\\d+$)(?:[a-zA-Z0-9-]+\\.)+[a-zA-Z]{2,}$"]
+    )

    lnbits_wallet_limit_max_balance: int = Field(default=0)
    lnbits_wallet_limit_daily_max_withdraw: int = Field(default=0)