fix(storage): reject embedded IPv4 rebinding hosts - #1112

Draft

seonghobae wants to merge 11 commits into

mainfrom

cursor/reject-embedded-ip-rebinding-hosts-206f

Commits on Aug 20, 2026

feat(storage): add executable object-storage contract
seonghobae
committed
7f73d4e
test(storage): expose object contract trust gaps
seonghobae
committed
eae2531
ci(storage): verify object contract hardening
seonghobae
committed
9349691
fix(storage): close object-storage hardening contract
seonghobae
committed
2080e91
fix(storage): drop leftover object-storage write workflow

cursoragent
and
seonghobae
committed
f33b0a8
fix(storage): reject numeric IP aliases in host allowlists

cursoragent
and
seonghobae
committed
d206f3d
fix(storage): close special-use SSRF and tenant-binding gaps

cursoragent
and
seonghobae
committed
14a7912
fix(storage): require DNS pinning and reject cluster rebinding hosts

cursoragent
and
seonghobae
committed
bfc9473
fix(storage): reject embedded IPv4 rebinding hosts

cursoragent
and
seonghobae
committed
b09f26f
fix(storage): reject hyphenated IPv4 rebinding labels

cursoragent
and
seonghobae
committed
3068296
fix(storage): reject punycode endpoint hosts
seonghobae
committed
dc7e39c