janniclas.loosenandClaude Opus 5.5 7f361304ae fix(security): URL import with own range check and a generic error (audit M3, cheap part) ...

PublicAddress blocks every private/reserved IPv4 and IPv6 range
(169.254/16, 100.64/10, fc00::/7, fe80::/10, IPv4-mapped/NAT64/6to4 by
their embedded address, ...) independent of the core version; checked
before the request and on every redirect (Requests before_redirect).
Network failures return only "Die Datei konnte nicht geladen werden.";
the detail goes to the error log. DNS-rebinding pinning stays deferred.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7

2026-09-26 19:27:11 +02:00

..

content-types.md

docs: Divi guides shortform/placeholders, hints name the write tools; test: Divi write end-to-end; version 0.3.0

2026-09-26 17:13:59 +02:00

divi-attrs.md

docs: lit-divi-catalog shows both result shapes (trial)

2026-09-26 19:23:47 +02:00

divi-design-system.md

feat: Divi hints point to the read tools; guides divi-structure/attrs/design-system; test: Divi read end-to-end

2026-09-26 12:41:42 +02:00

divi-placeholders.md

docs: S7 exception applies only to pages not yet in Divi's saved form

2026-09-26 17:26:04 +02:00

divi-shortform.md

feat: short-form level for every module with a heading title (trial)

2026-09-26 19:20:23 +02:00

divi-structure.md

docs: Divi guides shortform/placeholders, hints name the write tools; test: Divi write end-to-end; version 0.3.0

2026-09-26 17:13:59 +02:00

media.md

fix(security): URL import with own range check and a generic error (audit M3, cheap part)

2026-09-26 19:27:11 +02:00

overview.md

docs: Divi guides shortform/placeholders, hints name the write tools; test: Divi write end-to-end; version 0.3.0

2026-09-26 17:13:59 +02:00

workflows.md

feat: lit/menu-create returns the new menu's menu_rev (trial)

2026-09-26 19:23:07 +02:00