4 ms·

Tldr: Leading zeros in ips are not calculated correctly. The stated „server-side request forgery, remote file inclusion, local file inclusion, and more“ issues

by tpetry 6y ago

Tldr: Leading zeros in ips are not calculated correctly. The stated „server-side request forgery, remote file inclusion, local file inclusion, and more“ issues are not within the package, these are anticipated issues when ips pass the validation which should fail...

dahfizz 6y ago
Not quite. The issue is that _valid_ IPs expressed in octal are being accepted and parsed in decimal.