Donal McBreen 9fb419e469 Block IPv6 addresses that reach internal IPs in the unfurl guard ...

The guard blocked the usual private, loopback, and link-local ranges (and
the IPv4-mapped/-compatible IPv6 forms), but let through NAT64, 6to4, and
Teredo addresses, which can point at an internal IPv4, and CGNAT.

Now it pulls the IPv4 out of a NAT64 address and checks that (so NAT64 to a
public site still works), blocks 6to4 and Teredo outright, and adds the
missing IPv4 and IPv6 ranges.

2026-07-20 16:20:15 +01:00

..

assets

Hello world

2025-08-21 09:31:59 +01:00

rails_ext

Try to decode SGIDs in multiple ways

2025-12-15 17:00:50 +01:00

restricted_http

Block IPv6 addresses that reach internal IPs in the unfurl guard

2026-07-20 16:20:15 +01:00

tasks

Upgrade to Rails 8 and Ruby 3.4.5 (#1)

2025-09-02 17:02:41 +02:00

web_push

Hello world

2025-08-21 09:31:59 +01:00