bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-13 14:37:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Block IPv4-compatible IPv6 feed URLs (#32)

Browse source 
Co-authored-by: Codex Microtask Operator <codex-microtask@example.com>
This commit is contained in:
Autowebassat-blip 2026-06-14 07:58:57 +02:00 • committed by GitHub
parent 307095d5e9
commit 774d461db6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
plugins/feed-discovery/src/feed-discovery.test.ts
View file

@ -63,6 +63,7 @@ describe("site probing helpers", () => {
await expect(assertSafeHttpUrl("http://127.0.0.1/feed")).rejects.toThrow(/Blocked internal/);
await expect(assertSafeHttpUrl("http://[::]/feed")).rejects.toThrow(/Blocked internal/);
await expect(assertSafeHttpUrl("http://[::ffff:192.168.1.10]/feed")).rejects.toThrow(/Blocked internal/);
await expect(assertSafeHttpUrl("http://[::192.168.1.10]/feed")).rejects.toThrow(/Blocked internal/);
await expect(assertSafeHttpUrl("file:///etc/passwd")).rejects.toThrow(/Unsupported URL protocol/);
});

10
plugins/feed-discovery/src/url-safety.ts
View file

@ -67,6 +67,16 @@ function isBlockedIp(value: string) {
if (kind === 6) {
const normalized = value.toLowerCase();
const compatibleDottedIpv4 = /^::(\d+\.\d+\.\d+\.\d+)$/.exec(normalized);
if (compatibleDottedIpv4) {
return isBlockedIp(compatibleDottedIpv4[1]);
}
const compatibleHexIpv4 = /^::([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(normalized);
if (compatibleHexIpv4) {
const high = Number.parseInt(compatibleHexIpv4[1], 16);
const low = Number.parseInt(compatibleHexIpv4[2], 16);
return isBlockedIp(`${high >> 8}.${high & 255}.${low >> 8}.${low & 255}`);
}
const mappedDottedIpv4 = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(normalized);
if (mappedDottedIpv4) {
return isBlockedIp(mappedDottedIpv4[1]);