11 lines
615 B
JavaScript
11 lines
615 B
JavaScript
import test from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import {defaultPolicy} from '../packages/core/policy.mjs';
|
|
import {dnsAddressBlocked} from '../packages/core/security.mjs';
|
|
test('IPv4-mapped IPv6 cannot bypass blocked destination IPs',()=>{
|
|
const p=defaultPolicy();p.security.dns.blockedIPs=['127.0.0.2'];
|
|
for(const ip of ['127.0.0.2','::ffff:127.0.0.2','0:0:0:0:0:ffff:7f00:2'])assert.equal(dnsAddressBlocked(ip,p),true);
|
|
assert.equal(dnsAddressBlocked('::ffff:127.0.0.3',p),false);
|
|
p.security.dns.blockedIPs=['::ffff:7f00:2'];assert.equal(dnsAddressBlocked('127.0.0.2',p),true);
|
|
});
|