ssrf

package

v0.0.3 Latest Latest Go to latest Published: Aug 24, 2026 License: Apache-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/deepteams/credbound

Links

Open Source Insights

Documentation ¶

Overview ¶

Package ssrf holds the outbound-fetch address policy shared by the adapters that dereference configured URLs on behalf of a host: OAuth Client Identifier Metadata Documents (oauthhttp), private_key_jwt JWKS documents (oauthclientadapter), and SAML IdP metadata (samladapter). Only globally routable unicast addresses may be dialed, so a hostname resolving into loopback, private, link-local, CGNAT or reserved ranges cannot be used to reach internal services.

Index ¶

func PublicAddress(address netip.Addr) bool
func PublicIP(ip net.IP) bool

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func PublicAddress ¶

func PublicAddress(address netip.Addr) bool

PublicAddress reports whether address is globally routable unicast and therefore safe to dial for a host-configured URL fetch.

func PublicIP ¶

func PublicIP(ip net.IP) bool

PublicIP adapts PublicAddress to the net.IP values returned by net.Resolver.LookupIPAddr.

Types ¶

This section is empty.

Source Files ¶

View all Source files

ssrf.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL