Skip to content

Fail committed URLs whose host is an integer-form address - #57

Merged
jmjava merged 1 commit into
mainfrom
cursor/fail-integer-form-committed-ip
Nov 1, 2026
Merged

jmjava merged 1 commit into
mainfrom
cursor/fail-integer-form-committed-ip

Conversation

@jmjava

@jmjava jmjava commented Nov 1, 2026

Copy link
Copy Markdown
Owner

Summary

  • The committed-address scan only looked at dotted quads, so http://134744072:11434 and http://0x08080808/ passed.
  • Those hosts are classified as IPv4. Loopback integer form (http://2130706433/, which is 127.0.0.1) still passes.

Test plan

  • The decimal and hex public hosts fail committed_ips (they passed before this change)
  • The loopback integer host still passes, and tests.test_safety plus tests.test_deployment_safety_ci pass
  • CI unit and mutation checks green

Made with Cursor

Decimal and hex hosts never matched the dotted-quad scan, so a public address written that way passed.

Co-authored-by: Cursor <cursoragent@cursor.com>
@jmjava
jmjava merged commit 71f0152 into main Nov 1, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant