sneak/pixa
1
0 Fork 0
Code Issues 6 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299) #300

Merged
clawbot merged 7 commits from issue-299-nat64-local-and-blocked-networks into next 2026-10-16 06:52:18 +02:00
Conversation 8 Commits 7 Files Changed 5
+2 -2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 07c4746c59 - Show all commits
internal/httpfetcher/httpfetcher.go
+2 -2
View File
@@ -618,8 +618,8 @@ func isBlockedIP(ip net.IP, blocked []netip.Prefix) bool {
addr = addr.Unmap() addr = addr.Unmap()
// ip read as IPv4 where it is or holds an IPv4 address, otherwise the // ip read as IPv4 where it is or holds an IPv4 address, otherwise the
// zero netip.Addr, which no prefix contains. It differs from addr only // zero netip.Addr, which no prefix contains. Matching asIPv4 as well as
// for an IPv4-compatible address. // addr refuses more only for an IPv4-compatible address.
asIPv4, _ := netip.AddrFromSlice(ipv4CompatibleToIPv4(ip).To4()) asIPv4, _ := netip.AddrFromSlice(ipv4CompatibleToIPv4(ip).To4())
return slices.ContainsFunc(blocked, func(prefix netip.Prefix) bool { return slices.ContainsFunc(blocked, func(prefix netip.Prefix) bool {