i/Aether
1
0
Fork 0
mirror of https://github.com/fawney19/Aether.git synced 2026-09-12 22:20:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(network): tolerate synthetic DNS for trusted origins

Browse Source
This commit is contained in:
elky
2026-09-04 17:25:53 +08:00
parent c142d39951
commit c005700a7e
7 changed files with 321 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/aether-http/src/header_security.rs
+2 -2
View File
@@ -91,8 +91,8 @@ pub fn is_private_or_reserved_ip(ip: IpAddr) -> bool {
/// Return whether an address belongs to RFC 2544's IPv4 benchmarking range.
///
/// Local DNS interception tools (for example, Surge in Fake-IP mode) commonly
/// synthesize answers from `198.18.0.0/15`. The range is intentionally still
/// Local DNS interception tools commonly synthesize answers from
/// `198.18.0.0/15`. The range is intentionally still
/// classified as reserved by [`is_private_or_reserved_ip`]; callers may use
/// this predicate only when they have independently established that the
/// hostname is a trusted, fixed destination. Keeping the predicates separate