Function enableDnsLeaksProtection

src/helper/windows/process_command.cpp:643–665

}

std::string enableDnsLeaksProtection(const std::string &pars)
{
    std::vector<std::wstring> customDnsIp;
    deserializePars(pars, customDnsIp);

    // Rather than reject the whole request on bad input, sanitize it: drop any invalid IP entries
    // and apply the valid remainder. These IPs are only excluded from the DNS firewall block, so
    // dropping a malformed one fails closed (that IP simply stays blocked).
    customDnsIp.erase(std::remove_if(customDnsIp.begin(), customDnsIp.end(),
                                     [](const std::wstring &ip) {
                                         if (NetworkValidation::isValidIpAddress(ip)) {
                                             return false;
                                         }
                                         spdlog::error(L"enableDnsLeaksProtection: dropping invalid IP address: \"{}\"", ip);
                                         return true;
                                     }),
                      customDnsIp.end());

    spdlog::debug("enableDnsLeaksProtection");
    DnsFirewall::instance().setExcludeIps(customDnsIp);
    DnsFirewall::instance().enable();
    return std::string();
}

std::string disableDnsLeaksProtection(const std::string &pars)
{