public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-04-09 22:47:56 +09:00
Code Issues Packages Projects Releases Wiki Activity
130 Commits 1 Branch 5 Tags
3fada3d9970b627672a4a2cedada96d081bd1dc6
Commit Graph

3 Commits

Author SHA1 Message Date
Jeremy Daer
e983e3f79f Block IPv6 SSRF bypass via ipv4_compat addresses (#153) 
Adds ipv4_mapped? and ipv4_compat? checks to PrivateNetworkGuard.private_ip?
to block SSRF bypass attempts using IPv6 address formats like:
- ::ffff:169.254.169.254 (IPv4-mapped)
- ::169.254.169.254 (IPv4-compatible)

These formats could previously bypass the link_local? check since Ruby
treats them as IPv6 addresses, not IPv4.

Ref: HackerOne #3481701
 2025-12-31 13:01:43 -08:00
Stanko K.R.
4d04f9beee Use urlsafe base64 decode 2025-12-02 11:34:12 +01:00
Stanko K.R.
bebe518c74 Parse Rails 7 GIDs 2025-12-02 11:06:23 +01:00