ssrf

Jul 7, 2026

Changes in this version

type Guardian

+ func (g *Guardian) SafeAddr(ip netip.Addr) error

+ func (g *Guardian) SafeAddrPort(ipport netip.AddrPort) error

Jul 6, 2023

Changes in this version

+ var IPv4DeniedPrefixes = []netip.Prefix

+ var IPv6DeniedPrefixes = []netip.Prefix

+ var IPv6GlobalUnicast = netip.MustParsePrefix("2000::/3")

+ var IPv6NAT64Prefix = netip.MustParsePrefix("64:ff9b::/96")

Dec 1, 2022

Changes in this version

+ var ErrInvalidHostPort = errors.New("invalid host:port pair")

+ var ErrProhibitedIP = errors.New("prohibited IP address")

+ var ErrProhibitedNetwork = errors.New("prohibited network type")

+ var ErrProhibitedPort = errors.New("prohibited port number")

+ var IPv4SpecialPurpose = []netip.Prefix

+ var IPv6SpecialPurpose = []netip.Prefix

+ type Guardian struct

+ func New(opts ...Option) *Guardian

+ func (g *Guardian) Safe(network string, address string, _ syscall.RawConn) error

+ type Option = func(g *Guardian)

+ func WithAllowedV4Prefixes(prefixes ...netip.Prefix) Option

+ func WithAllowedV6Prefixes(prefixes ...netip.Prefix) Option

+ func WithAnyNetwork() Option

+ func WithAnyPort() Option

+ func WithDeniedV4Prefixes(prefixes ...netip.Prefix) Option

+ func WithDeniedV6Prefixes(prefixes ...netip.Prefix) Option

+ func WithNetworks(networks ...string) Option

+ func WithPorts(ports ...uint16) Option