add non-global IPs as forbidden

gantoine · gantoine · commit 064a65698cf4 · 2026-06-03T16:21:27.000-04:00
diff --git a/backend/utils/ssrf.py b/backend/utils/ssrf.py
@@ -54,6 +54,7 @@ def is_forbidden_ip(ip: ipaddress.IPv4Address | ipaddress.IPv6Address) -> bool:
         or ip.is_reserved
         or ip.is_multicast
         or ip.is_unspecified
+        or not ip.is_global
     )
 
 

Original file line number	Diff line number	Diff line change
`@@ -54,6 +54,7 @@ def is_forbidden_ip(ip: ipaddress.IPv4Address \| ipaddress.IPv6Address) -> bool:`
`54`	`54`	`or ip.is_reserved`
`55`	`55`	`or ip.is_multicast`
`56`	`56`	`or ip.is_unspecified`
	`57`	`+ or not ip.is_global`
`57`	`58`	`)`
`58`	`59`
`59`	`60`