Skip to main content

is_blocked_address

universal_agent_runtime::uar::tools::fetch_guard

Function is_blocked_address 

Source 
pub fn is_blocked_address(ip: IpAddr) -> bool
Expand description

Whether an address is in space the tool must never reach.

This is the SSRF control. It covers loopback, RFC1918, link-local (which includes 169.254.169.254, the cloud metadata endpoint), unspecified, and IPv6 unique-local — plus the IPv4-mapped IPv6 form, which is a common bypass (::ffff:127.0.0.1 is loopback wearing a different hat).