arkadiyt / ssrf_filter / 24967700845

100%

main: 100%

Pull #90

github

Add missing IPv6 denylist entries

Cross-referenced the IPv6 denylist against the IANA IPv6 Special-Purpose
Address Registry. Adds four entries that should be blocked but were missing:

* `::/128` — Unspecified Address (RFC 4291). Defense-in-depth analog of
  `0.0.0.0/32` (which is already covered via `0.0.0.0/8`).
* `2001:2::/48` — Benchmarking (RFC 5180). IPv6 analog of the
  already-blocked `198.18.0.0/15`.
* `3fff::/20` — Documentation (RFC 9637, 2024). Newer documentation
  prefix alongside the existing `2001:db8::/32`.
* `5f00::/16` — Segment Routing (SRv6) SIDs (RFC 9602, 2024). Reserved
  for SRv6 segment identifiers, not intended for global routing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

1 of 1 new or added line in 1 file covered. (100.0%)

130 of 130 relevant lines covered (100.0%)

470.42 hits per line