sneak aadbab8cf0 Refuse [::], 0.0.0.0, IPv6 multicast and documentation space (closes #341) ...

On Linux a connection to the unspecified address [::] or 0.0.0.0
reaches the host's own loopback, and the SSRF guard let [::] through.
Both unspecified addresses now sit in alwaysBlockedNetworks, so an
allowlist reaches loopback only by naming it; ::/128 joins the default
blocklist beside 0.0.0.0/8. IPv6 multicast (ff00::/8) and documentation
space (2001:db8::/32) are refused by default. Every default blocklist
entry gets a one-line comment, and the README, the rules above each
list and the two pinning tests follow.

Model: opus-5-5

2026-10-02 07:14:58 +00:00

..

config_test.go

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-02 00:41:36 +02:00

config.go

Refuse [::], 0.0.0.0, IPv6 multicast and documentation space (closes #341)

2026-10-02 07:14:58 +00:00

dotenv_test.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

env_test.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00

export_test.go

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-02 00:41:36 +02:00

sentry_test.go

Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)

2026-08-24 04:25:29 +02:00