Skip to content

255.255.255.255 IP address should be blocked

Proposal

Add 255.255.255.255 to local network blocklist in Gitlab::UrlBlocker

Problem

According to https://datatracker.ietf.org/doc/html/rfc6890, 255.255.255.255 is reserved.

The address 255.255.255.255 denotes a broadcast on a local hardware network, which must not be forwarded. This address may be used, for example, by hosts that do not know their network number and are asking some server for it.

-- https://datatracker.ietf.org/doc/html/rfc0919#section-7

Links

/cc @gitlab-com/gl-security/appsec