Donal McBreen 4cfcc2a370 Re-check the IPv4 embedded in local-use NAT64 instead of blocking outright ...

Matches the fizzy guard: the local-use NAT64 prefix (64:ff9b:1::/48,
RFC 8215) embeds an IPv4 target in its low 32 bits just like the
well-known prefix, so run it through the same embedded-IPv4 recheck.
Local-use NAT64 to a public address now resolves (keeping unfurls
working for self-hosters on such networks) while local-use NAT64 to an
internal address stays blocked.

2026-07-20 17:13:18 +01:00

..

rails_ext

Use urlsafe base64 decode

2025-12-02 11:34:12 +01:00

restricted_http

Re-check the IPv4 embedded in local-use NAT64 instead of blocking outright

2026-07-20 17:13:18 +01:00