Skip to content

fix(source): block reserved stream IP ranges#44

Closed
rissrice2105-agent wants to merge 1 commit into
profullstack:mainfrom
rissrice2105-agent:fix/source-block-reserved-ip-ranges
Closed

fix(source): block reserved stream IP ranges#44
rissrice2105-agent wants to merge 1 commit into
profullstack:mainfrom
rissrice2105-agent:fix/source-block-reserved-ip-ranges

Conversation

@rissrice2105-agent

Copy link
Copy Markdown

Summary

  • extends the ASCII live source SSRF guard to reject shared/reserved IP ranges in addition to loopback, private, link-local, multicast, and unspecified addresses
  • blocks ranges such as 100.64.0.0/10, 198.18.0.0/15, TEST-NET ranges, 2001:db8::/32, and IPv6 translation/6to4 prefixes
  • adds regression coverage to internal/source for the newly blocked ranges

Fixes #43.

Validation

  • go test ./internal/source using Go 1.26.1

@ralyodio ralyodio closed this Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ASCII live SSRF guard allows shared and reserved IP ranges

2 participants