Repository navigation
fix(server): isolate wildcard IP origins and reject overflowing ports - #180
Conversation
Recover b672663 with the origin tests, excluding unrelated documentation.
Use tryparse for request-controlled port text and add a regression test. Native Julia test execution remains pending.
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 58 minutes. View limit details
Autofix is active · Waiting for CI/review
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 72d188e636
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
Autofix was enabled. Check current status in the Coding task. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
|
1 participant
Two incremental commits recover the wildcard-bind origin change and then replace throwing port parsing with tryparse. A regression test covers a 100-digit request port. Existing tests cover IP matches, mismatched origins, DNS-rebinding-shaped hostnames and environment isolation.
Validation: whitespace checks pass. Julia and the server tests have not run in this environment. Keep draft until native tests and CI pass; the address regex still needs validation against malformed IPv4/IPv6 literals. No dependency changes or broad documentation rewrite.
Recovered from b672663 after #178; all original work remains on archive/pre-sync-2026-10-17.