Skip to content

Block bracketed IPv6 loopback webhook URLs - #36

Merged
ralyodio merged 1 commit into
moshcoder:masterfrom
aiirvizionz:clientkit/block-bracketed-ipv6-loopback
Jul 20, 2026
Merged

Block bracketed IPv6 loopback webhook URLs#36
ralyodio merged 1 commit into
moshcoder:masterfrom
aiirvizionz:clientkit/block-bracketed-ipv6-loopback

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • normalize bracketed IPv6 hostnames before checking loopback/unspecified addresses
  • keep existing IPv4/private-range protections intact
  • add coverage for [::] alongside the existing private IPv6 webhook target cases

Test

  • node --test tests\url-guard.test.mjs tests\http-range.test.mjs

@ralyodio
ralyodio merged commit c265963 into moshcoder:master Jul 20, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants