From 032ab9e08c3d8c0f100ce6966b7da0ef71a21805 Mon Sep 17 00:00:00 2001 From: Tom Fenech Date: Sun, 30 Nov 2025 15:13:01 +0100 Subject: [PATCH] allow additional ranges of ips --- oryx/ipx/ssrf.go | 1 + 1 file changed, 1 insertion(+) diff --git a/oryx/ipx/ssrf.go b/oryx/ipx/ssrf.go index 38ea4c898..1519a87be 100644 --- a/oryx/ipx/ssrf.go +++ b/oryx/ipx/ssrf.go @@ -24,6 +24,7 @@ var ( ssrf.WithNetworks("tcp4", "tcp6"), ssrf.WithAllowedV4Prefixes( netip.MustParsePrefix("10.0.0.0/8"), // Private-Use (RFC 1918) + netip.MustParsePrefix("100.64.0.0/10"), // Shared Address Space (RFC 6598) netip.MustParsePrefix("127.0.0.0/8"), // Loopback (RFC 1122, Section 3.2.1.3)) netip.MustParsePrefix("169.254.0.0/16"), // Link Local (RFC 3927) netip.MustParsePrefix("172.16.0.0/12"), // Private-Use (RFC 1918)