1 Commits

Author	SHA1	Message	Date
jakeaturner	736c9bd672	fix(security): canonicalize hostnames to block IPv4-mapped IPv6 IMDS bypass ... Replace literal string matching with ipaddr.js parsing so equivalent encodings of 169.254.169.254 (::ffff:169.254.169.254, ::ffff:a9fe:a9fe,fully-expanded forms) and fd00:ec2::254 are all rejected.	2026-05-20 10:16:00 -07:00