add non-global IPs as forbidden

2026-06-27 22:35:57 +00:00 · 2026-06-03 16:21:27 -04:00
parent 96efc36d52
commit 064a65698c
1 changed files with 1 additions and 0 deletions
--- a/backend/utils/ssrf.py
+++ b/backend/utils/ssrf.py
@@ -54,6 +54,7 @@ def is_forbidden_ip(ip: ipaddress.IPv4Address | ipaddress.IPv6Address) -> bool:
        or ip.is_reserved
        or ip.is_multicast
        or ip.is_unspecified
+        or not ip.is_global
    )