sneak 8fceeca202 Match blocked_networks against both forms of an address holding IPv4 ...

isBlockedIP refuses an address when a blocked_networks entry contains
it as an IPv6 address or contains the IPv4 address it holds, for the
mapped (::ffff:0:0/96) and the IPv4-compatible (::/96) form alike, so
an IPv6 entry refuses everything it refused on next. ipv6AndIPv4Forms
gives the two forms. Go keeps a plain IPv4 address in the mapped form,
so an entry covering ::ffff:0:0/96, such as ::/0, now refuses every
IPv4 address too.

Model: opus-5-5

2026-10-16 04:14:20 +00:00

..

blocked_networks_internal_test.go

feat: blocked_networks config and extended SSRF ranges (closes #67)

2026-09-22 00:43:27 +02:00

dial_context_internal_test.go

Test the image proxy flow end to end (closes #80)

2026-10-04 23:24:46 +02:00

fetch_internal_test.go

Accept a chunked upstream body of exactly the maximum size (closes #248)

2026-10-15 07:44:09 +02:00

httpfetcher_internal_test.go

Refuse an IPv6 address that holds an internal IPv4 address (closes #297)

2026-10-16 05:31:55 +02:00

httpfetcher.go

Match blocked_networks against both forms of an address holding IPv4

2026-10-16 04:14:20 +00:00

jpegxl_internal_test.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

max_connections_internal_test.go

Remove idle host semaphores and delete .meta with its variant (closes #87)

2026-10-04 07:11:31 +02:00

mock.go

Serve and accept JPEG XL as an image format (part of #222)

2026-10-08 11:01:12 +02:00

request_id_internal_test.go

Return and pass on request IDs, and give /v1/e/ ETag, 304 and HEAD (closes #84)

2026-10-04 12:41:54 +02:00