bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prohibit link local addresses

Browse Source
This commit is contained in:
Stanko K.R.
2025-12-02 09:32:15 +01:00
parent 6d90a47c1b
commit 78c6751fa0
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/models/webhook/delivery.rb
+1 -3
View File
@@ -4,8 +4,6 @@ class Webhook::Delivery < ApplicationRecord
ENDPOINT_TIMEOUT = 7.seconds
DNS_RESOLUTION_TIMEOUT = 2
DISALLOWED_IP_RANGES = [
# IPv4 mapped to IPv6
IPAddr.new("::ffff:0:0/96"),
# Broadcasts
IPAddr.new("0.0.0.0/8")
].freeze
@@ -85,7 +83,7 @@ class Webhook::Delivery < ApplicationRecord
end
ip_addresses.any? do |ip|
ip.private? || ip.loopback? || DISALLOWED_IP_RANGES.any? { |range| range.include?(ip) }
ip.private? || ip.loopback? || ip.link_local? || ip.ipv4_mapped? || DISALLOWED_IP_RANGES.any? { |range| range.include?(ip) }
end
end