fix(security): C6 — block loopback IP literals in /registry/register - #94

Merged

HongmingWang-Rabbit merged 2 commits into

mainfrom

fix/c6-loopback-ssrf

Apr 15, 2026

Commits on Apr 15, 2026

fix(security): C6 — block loopback IP literals in /registry/register

Backend Engineer
and
claude
committed
19bdd81
fix(security): C6 — extend SSRF blocklist to RFC-1918 private ranges

Backend Engineer
and
claude
committed
63e482f