Skip to content

Fix data exfiltration on osx by ipaddress #136

Open
chris-smith-zocdoc wants to merge 2 commits intoanthropic-experimental:mainfrom
Zocdoc:issue_131
Open

Fix data exfiltration on osx by ipaddress #136
chris-smith-zocdoc wants to merge 2 commits intoanthropic-experimental:mainfrom
Zocdoc:issue_131

Conversation

@chris-smith-zocdoc
Copy link

Fixes #131

This slightly alters the behavior from your change @dylan-conway #127 because I couldn't find a way to allow the ipv4 mapped ipv6 while still blocking outbound network traffic to the internet. This allows the listen to bind correctly to ::ffff:127.0.0.1 but not connect, though you can still connect using the ipv4 or ipv6 addresses

…l local IPs (local ip "*:*") to only allowing localhost (remote ip "localhost:*"), properly blocking connections to public IPs.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Data exfiltration via IP when allowLocalBinding: true

1 participant