rushabdev
|
a9521f8482
|
fix(feed-discovery): block additional reserved SSRF IP ranges
Closes #88
Expand feed-discovery SSRF guard to reject additional non-public
IPv4 and IPv6 address ranges:
IPv4:
- Documentation TEST-NET-1/2/3 (192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24)
- IETF protocol assignments (192.0.0.0/24)
- Benchmark (198.18.0.0/15)
- Multicast (224.0.0.0/4) and reserved (240.0.0.0/4)
IPv6:
- Discard-only (100::/64)
- Benchmark (2001:2::/48)
- Documentation (2001:db8::/32)
- Full link-local scope (fe80::/10, not just fe80::)
- Multicast (ff00::/8)
Adds regression tests for all newly blocked ranges.
|
2026-06-30 16:54:34 +00:00 |
|
Autowebassat-blip
|
774d461db6
|
Block IPv4-compatible IPv6 feed URLs (#32)
Co-authored-by: Codex Microtask Operator <codex-microtask@example.com>
|
2026-06-13 22:58:57 -07:00 |
|
Autowebassat-blip
|
ffefd364ce
|
Ignore malformed feed probe candidates (#43)
Co-authored-by: Codex Microtask Operator <codex-microtask@example.com>
|
2026-06-13 22:55:39 -07:00 |
|
RissRIce
|
aa3fdba277
|
Detect podcast RSS item enclosures (#50)
|
2026-06-13 22:55:06 -07:00 |
|
lazyGPT07
|
be530ab687
|
fix(feeds): enforce freshness window (#52)
|
2026-06-13 22:54:53 -07:00 |
|
Autowebassat-blip
|
73e2464b30
|
Block IPv6 unspecified feed URLs (#15)
|
2026-06-11 21:06:03 -07:00 |
|
|
|
5cfeea6b57
|
Add feed discovery plugin
|
2026-06-09 09:34:31 +00:00 |
|
