From 654af4960f723513d5b5c396697114e287f8a845 Mon Sep 17 00:00:00 2001
From: Inverle <inverle@proton.me>
Date: Sat, 17 Oct 2026 15:04:02 +0200
Subject: [PATCH] Revert "Fix local DNS leak when fetching feeds through a
 proxy (#93)"

This reverts commit 2af5d32a45a3f616c787960db57766bdeea0fb87.
---
 src/File.php | 36 +++++++++++++++++-------------------
 1 file changed, 17 insertions(+), 19 deletions(-)

diff --git a/src/File.php b/src/File.php
index fd2348d54..4796296b6 100644
--- a/src/File.php
+++ b/src/File.php
@@ -160,25 +160,23 @@ public function __construct(string $url, int $timeout = 10, int $redirects = 5,
                     }
                     $proxy = preg_replace('#^.*://#i', '', $proxy); // Strip any scheme already present in CURLOPT_PROXY
                     $proxy_url = "$proxy_scheme://$proxy"; // CURLOPT_PROXY ($proxy) is formatted as user:pass@hostname:port, with the part before @ being optional
-                    if ($proxy_type === CURLPROXY_SOCKS4A || $proxy_type === CURLPROXY_SOCKS5_HOSTNAME) {
-                        $resolve = [];
-                    } else {
-                        $resolve = $this->get_curl_resolve_info($proxy_url);
-                        if ($resolve === null) {
-                            $this->error = 'Failed to fetch this URL, because the proxy’s IP is not in the allowlist [' .
-                                \SimplePie\Misc::url_remove_credentials($url) . '] [' .
-                                \SimplePie\Misc::url_remove_credentials($proxy_url) . ']';
-                            $this->success = false;
-                            return;
-                        } elseif ($resolve === false) {
-                            $this->error = 'Failed to resolve proxy hostname: ' . \SimplePie\Misc::url_remove_credentials($proxy_url);
-                            $this->success = false;
-                            return;
-                        }
-                        if (!empty($resolve)) {
-                            // For the other proxy protocols, note that IPs for internal domains can be leaked, since the domain is resolved outside of the proxy
-                            $curl_options[CURLOPT_RESOLVE] = $resolve;
-                        }
+                    $resolve = $this->get_curl_resolve_info($proxy_url);
+                    if ($resolve === null) {
+                        $this->error = 'Failed to fetch this URL, because the proxy’s IP is not in the allowlist [' .
+                            \SimplePie\Misc::url_remove_credentials($url) . '] [' .
+                            \SimplePie\Misc::url_remove_credentials($proxy_url) . ']';
+                        $this->success = false;
+                        return;
+                    } elseif ($resolve === false) {
+                        $this->error = 'Failed to resolve proxy hostname: ' . \SimplePie\Misc::url_remove_credentials($proxy_url);
+                        $this->success = false;
+                        return;
+                    }
+                    if (!empty($resolve)) {
+                        // Only for the proxy domain, socks4a and socks5h DNS queries will be passed through the proxy.
+                        // For the other proxy protocols, note that IPs for internal domains can be leaked,
+                        // since the domain is resolved outside of the proxy.
+                        $curl_options[CURLOPT_RESOLVE] = $resolve;
                     }
                 }
                 $this->method = \SimplePie\SimplePie::FILE_SOURCE_REMOTE | \SimplePie\SimplePie::FILE_SOURCE_CURL;