Andrey Antukh d39b135feb 🐛 Block IPv6 transition addresses in SSRF guard ...

The outbound HTTP SSRF blocklist did not classify NAT64
(64:ff9b::/96), 6to4 (2002::/16) or Teredo (2001:0000::/32)
addresses, whose embedded IPv4 target is invisible to the JVM
InetAddress predicates, so URLs resolving to them could reach cloud
metadata, loopback or RFC 1918 hosts from webhook delivery and media
import.

Transition ranges are now rejected outright and any embedded IPv4 is
re-checked against the full blocklist, including operator-supplied
extra blocked CIDRs.

Closes #11319

2026-08-21 13:45:04 +02:00

..

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

🐛 Add concurrency limit to import-binfile RPC handler (#11024)

2026-08-17 11:08:07 +02:00

scripts

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

src

🐛 Block IPv6 transition addresses in SSRF guard

2026-08-21 13:45:04 +02:00

test

🐛 Block IPv6 transition addresses in SSRF guard

2026-08-21 13:45:04 +02:00

build.clj

🐛 Fix unexpected exception on logger caused by log4j2 plugin

2023-02-11 00:52:23 +01:00

deps.edn

🐛 Add backend password validation with complexity rules and dictionary check (#11059)

2026-08-06 10:17:14 +02:00

package.json

✨ Add Node.js E2E API tests for backend (#10787)

2026-08-05 10:15:41 +02:00

pnpm-lock.yaml

✨ Add Node.js E2E API tests for backend (#10787)

2026-08-05 10:15:41 +02:00

pnpm-workspace.yaml

⬆️ Update pnpm dependencies across all modules

2026-08-04 14:15:35 +02:00

tests.edn

🔧 Change backend test runner to kaocha

2024-05-29 19:05:04 +02:00