ipx

Documentation

Index

• func AreAllAssociatedIPsAllowed(pairs map[string]string) error
• func IsAssociatedIPAllowed(ipOrHostnameOrURL string) error
• func IsAssociatedIPAllowedWhenSet(ipOrHostnameOrURL string) error

Functions

func AreAllAssociatedIPsAllowed

func AreAllAssociatedIPsAllowed(pairs map[string]string) error

AreAllAssociatedIPsAllowed fails if one of the pairs is failing.

func IsAssociatedIPAllowed

func IsAssociatedIPAllowed(ipOrHostnameOrURL string) error

IsAssociatedIPAllowed returns nil for a domain (with NS lookup), IP, or IPv6 address if it does not resolve to a private IP subnet. This is a first level of defense against SSRF attacks by disallowing any domain or IP to resolve to a private network range.

Please keep in mind that validations for domains is valid only when looking up. A malicious actor could easily update the DSN record post validation to point to an internal IP

func IsAssociatedIPAllowedWhenSet

func IsAssociatedIPAllowedWhenSet(ipOrHostnameOrURL string) error

IsAssociatedIPAllowedWhenSet is a wrapper for IsAssociatedIPAllowed which returns valid when ipOrHostnameOrURL is empty.