vvzvlad/gitmost
1
0
Fork 0
Code Issues 14 Pull Requests 12 Packages Projects Releases Activity

test(ssrf): add IP-level bypass-vector cases (ported from GLM branch)

Browse Source 
Adds explicit isIpAllowed cases for the CGNAT, ULA (fd00::/8) and IPv4-mapped
IPv6 loopback (::ffff:127.0.0.1) sample addresses from the parallel
safety-coverage branch. The mapped-loopback case is genuinely new (the existing
table only covered the mapped *private* variant); CGNAT and ULA ranges were
already covered with other samples and are kept here as explicit regression
guards for these specific addresses.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
claude code agent 227
2026-06-20 18:00:43 +03:00
committed by vvzvlad
parent cedea4072b
commit ec128d54b4
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
apps/server/src/core/ai-chat/external-mcp/ssrf-guard.spec.ts
View File

@@ -46,6 +46,20 @@ describe('isIpAllowed', () => {
expect(isIpAllowed(ip).ok).toBe(false);
});
// IP-level bypass vectors ported from the safety-coverage branch. CGNAT
// (100.64/10) and the ULA range (fc00::/7) are already exercised above with
// other sample addresses; the genuinely distinct case is the IPv4-mapped
// IPv6 *loopback* (::ffff:127.0.0.1) — the table above only had the mapped
// *private* variant. fd00::/8 is the commonly-assigned ULA prefix, kept as an
// explicit regression guard.
it.each([
['CGNAT', '100.64.0.1'],
['ULA fd00::/8', 'fd00::1'],
['IPv4-mapped IPv6 loopback', '::ffff:127.0.0.1'],
])('blocks bypass vector %s (%s)', (_label, ip) => {
expect(isIpAllowed(ip).ok).toBe(false);
});
it('allows a public IPv4 (8.8.8.8)', () => {
expect(isIpAllowed('8.8.8.8').ok).toBe(true);
});