yorkhellenandXubin Ren 13dec9d2c2 fix(security): normalize IPv6-mapped IPv4 addresses in SSRF checks ...

::ffff:127.0.0.1 and ::ffff:169.254.169.254 are IPv6Address objects
that match neither the IPv4 blocklists (127.0.0.0/8, 169.254.0.0/16)
nor the IPv6 ones (::1/128), allowing SSRF bypass via DNS responses
that return IPv6-mapped IPv4 addresses.

Add _normalize_addr() to convert ipv4_mapped IPv6 addresses to their
IPv4 form before blocklist/allowlist matching.

2026-05-30 15:34:49 +08:00

..

test_security_network.py

fix(security): normalize IPv6-mapped IPv4 addresses in SSRF checks

2026-05-30 15:34:49 +08:00

test_workspace_policy.py

feat(webui): add project workspaces and access controls (#4007)

2026-05-29 03:42:53 +08:00

test_workspace_sandbox.py

feat(webui): add project workspaces and access controls (#4007)

2026-05-29 03:42:53 +08:00