ms2k/remora
SHA256
Watch
0
Code Releases Activity

Permit private IPv6 while redacting responses

Browse source
This commit is contained in:
ms2k 2026-07-17 03:45:13 +09:00
commit 5cbb0364d2
1 changed files with 47 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
crates/remora-outbound/tests/policy.rs
View file

@ -158,11 +158,14 @@ async fn allowlists_never_override_metadata_denial() {
let policy = OutboundPolicyBuilder::new()
.allow_non_global("10.0.0.0/8".parse::<IpNet>().expect("network"))
.allow_non_global("169.254.0.0/16".parse::<IpNet>().expect("network"))
.allow_non_global("fd00::/8".parse::<IpNet>().expect("network"))
.allow_non_global("fc00::/7".parse::<IpNet>().expect("network"))
.build();
authorize_literal(&policy, "10.1.2.3")
.await
.expect("allowlisted private address");
authorize_literal(&policy, "fd12:3456:789a::1")
.await
.expect("allowlisted ULA address");
for address in [
"169.254.169.254",
"169.254.170.2",