sec(subsonic): authentication bypass in Subsonic API with non-existent username

Signed-off-by: Deluan <deluan@navidrome.org>
2025-02-18 18:49:34 -05:00
parent 70487a09f4
commit 09ae41a2da
4 changed files with 157 additions and 28 deletions
@@ -343,7 +343,6 @@ func validateIPAgainstList(ip string, comaSeparatedList string) bool {
 	}

 	testedIP, _, err := net.ParseCIDR(fmt.Sprintf("%s/32", ip))
-
 	if err != nil {
 		return false
 	}