openclaw

Author	SHA1	Message	Date
Peter Steinberger	baf656bc6f	fix: block IPv6 multicast SSRF bypass	2026-02-26 03:35:10 +01:00
Peter Steinberger	3af9d1f8e9	fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982 ) (thanks @stakeswky)	2026-02-24 03:28:00 +00:00
User	9df80b73e2	fix: allow RFC2544 benchmark range (198.18.0.0/15) through SSRF filter Telegram's API and file servers resolve to IPs in the 198.18.0.0/15 range (RFC 2544 benchmarking range). The SSRF filter was blocking these addresses because ipaddr.js classifies them as 'reserved', and the filter also had an explicit RFC2544_BENCHMARK_PREFIX check that blocked them unconditionally. Fix: exempt 198.18.0.0/15 from the 'reserved' range block in isBlockedSpecialUseIpv4Address(). Other 'reserved' ranges (TEST-NET-2, TEST-NET-3, documentation prefixes) remain blocked. The explicit RFC2544_BENCHMARK_PREFIX check is repurposed as the exemption guard. Closes #24973	2026-02-24 03:28:00 +00:00
Peter Steinberger	98427453ba	fix(network): normalize SSRF IP parsing and monitor typing	2026-02-22 18:55:34 +01:00
Peter Steinberger	333fbb8634	refactor(net): consolidate IP checks with ipaddr.js	2026-02-22 17:02:44 +01:00