denoland / deno

A modern runtime for JavaScript and TypeScript.
https://deno.com
MIT License
93.42k stars 5.18k forks source link

Feature request: Blacklist local IP addresses #23138

Open juchiast opened 3 months ago

juchiast commented 3 months ago

For our project, we need to allow access to only global IP addresses (https://doc.rust-lang.org/stable/std/net/enum.IpAddr.html#method.is_global). I suggest adding new CLI arguments:

teleclimber commented 2 months ago

I also badly need this. It's basic SSRF protection (OWASP ref) that is lacking from Deno. I wrote a similar issue here:

https://github.com/denoland/deno/issues/21227