Added loopback address whitelisting override

2026-06-03 00:37:59 +02:00
parent 0a95df4c39
commit 7961d934ba
3 changed files with 14 additions and 5 deletions
@@ -61,7 +61,7 @@ public sealed class PayfastPaymentConfirmationReceivedEventHandler(IServiceProvi

        if (notification.PerformBackgroundChecks)
        {
-            var isHostValid = await payfastService.ValidateReferrerIpAsync(notification.RemoteIpAddress!, cancellationToken);
+            var isHostValid = await payfastService.ValidateReferrerIpAsync(notification.RemoteIpAddress!, notification.AllowLoopback, cancellationToken);

            if (isHostValid.IsFailed) 
                throw new Exception("Security validation exception: Webhook packet source address failed cluster validation checks.");