progandy
progandy@feddit.de
Joined
0 posts • 72 comments
Exactly what I expected from them. The same interests that want chat control are here as well.
Exactly what I expected from them. The same interests that want chat control are here as well.
It’s interesting, that it would be hard to make a case that there was a “vulnerability” in the
ip
package. But it seems like this package’s entire purpose is input validation so it’s kind of weird the dev thinks otherwise.
Yes, input validation, probably for forms. What the Dev disputes is that he cannot see a case where it is used in a security critical way where
- the input format is unknown and
- it is essential to know if the IP is public or private.
In that case you still have the third party bridge https://github.com/emersion/hydroxide