9router/src/shared/utils
decolua 8ac631d615 fix(ssrf): block IPv6-mapped IPv4 addresses (GHSA-hj98-rc6w-m8cw)
isBlockedIpv6() did not normalize ::ffff:<ipv4>, allowing the SSRF
filter to be bypassed. Extract and validate via isBlockedIpv4().

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-26 12:14:30 +07:00
..
api.js chore: fix build warnings, add deployment config, and cleanup lint errors 2026-01-20 12:58:51 +07:00
apiKey.js Initial commit 2026-01-05 09:58:59 +07:00
clineAuth.js refactor(open-sse): remove reverse coupling open-sse -> src (E2) 2026-06-13 16:35:07 +07:00
cn.js Initial commit 2026-01-05 09:58:59 +07:00
connectionStatus.js refactor(app): DRY pass — split large files, extract shared utils 2026-06-14 19:31:09 +07:00
index.js feat(cli-tools): update CLI tools and add new models 2026-02-06 20:53:20 +07:00
machine.js chore: add buildOutput RTK filter, drop legacy cloud sync, internal cleanup 2026-05-16 10:54:41 +07:00
machineId.js Fix tunnel 2026-05-21 11:33:18 +07:00
providerCustomModels.js fix(models): store provider custom models by provider scope 2026-06-20 15:19:22 +07:00
providerModelsFetcher.js Refactor error handling to config-driven approach with centralized error rules 2026-04-15 11:46:47 +07:00
ssrfGuard.js fix(ssrf): block IPv6-mapped IPv4 addresses (GHSA-hj98-rc6w-m8cw) 2026-06-26 12:14:30 +07:00