Skip to content

fix(url-guard): block dotted IPv4-mapped IPv6 SSRF bypass - #145

Merged
ralyodio merged 2 commits into
profullstack:masterfrom
aiirvizionz:clientkit/block-root-dotted-internal-urls
Aug 3, 2026
Merged

fix(url-guard): block dotted IPv4-mapped IPv6 SSRF bypass#145
ralyodio merged 2 commits into
profullstack:masterfrom
aiirvizionz:clientkit/block-root-dotted-internal-urls

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • parse dotted-quad IPv4-mapped IPv6 literals such as ::ffff:192.168.1.1`n- validate octets before private/link-local host checks
  • add focused unit coverage

Validation

  • pnpm --filter @aiornot/web test -- url-guard.test.ts
  • pnpm --filter @aiornot/web typecheck

Fixes #136

@ralyodio
ralyodio merged commit 69e3169 into profullstack:master Aug 3, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants