public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-07-08 17:10:22 +09:00
Code Issues Packages Projects Releases Wiki Activity
145 Commits 2 Branches 5 Tags
52ccd24efadbf8edc8bd026b5ee4cadd8a3d1aba
Commit Graph

3 Commits

Author SHA1 Message Date
Jeremy Daer e983e3f79f Block IPv6 SSRF bypass via ipv4_compat addresses (#153) 
Adds ipv4_mapped? and ipv4_compat? checks to PrivateNetworkGuard.private_ip?
to block SSRF bypass attempts using IPv6 address formats like:
- ::ffff:169.254.169.254 (IPv4-mapped)
- ::169.254.169.254 (IPv4-compatible)

These formats could previously bypass the link_local? check since Ruby
treats them as IPv6 addresses, not IPv4.

Ref: HackerOne #3481701
 2025-12-31 13:01:43 -08:00
Stanko K.R. 4d04f9beee Use urlsafe base64 decode 2025-12-02 11:34:12 +01:00
Stanko K.R. bebe518c74 Parse Rails 7 GIDs 2025-12-02 11:06:23 +01:00