ssrf

Documentation

Overview

Package ssrf provides SSRF-safe HTTP transport that blocks connections to private/reserved IP addresses. Used by OIDC and CIMD adapters.

Index

• func IsPrivateIP(ip net.IP) bool
• func NewSafeTransport() *http.Transport

Functions

func IsPrivateIP

func IsPrivateIP(ip net.IP) bool

IsPrivateIP returns true if the given IP is in a private or reserved range.

func NewSafeTransport

func NewSafeTransport() *http.Transport

NewSafeTransport returns an http.Transport that blocks connections to private/reserved IP addresses. Used for outbound HTTP requests (OIDC discovery, CIMD fetch, etc.) to prevent SSRF attacks.