enforce port restrictions against requests that happen to be missing the port

2025-05-13 22:22:40 -04:00
parent 4ddb16aa9a
commit ebd4ccdd55
1 changed files with 1 additions and 1 deletions
@@ -32,7 +32,7 @@ export function isPrivateIp(allowedPrivateNetworks: PrivateNetwork[] | undefined

 	for (const { cidr, ports } of allowedPrivateNetworks ?? []) {
 		if (cidr[0].kind() === parsedIp.kind() && parsedIp.match(cidr)) {
-			if (port == null || ports == null || ports.includes(port)) {
+			if (ports == null || (port != null && ports.includes(port))) {
 				return false;
 			}
 		}