Bryan Helmkamp 125a73aae3 fix(client): reject all obfuscated IPv4 host forms at parse time ... Replace the narrow decimal/hex obfuscation check with a general comparison: if the parsed host is an IPv4 literal and the raw input host differs from the canonical dotted-quad form, the user supplied an obfuscated variant (octal, short-form, mixed radix, leading zeros, decimal integer, hex integer) that url::Url has already normalized to 127.0.0.1. All such variants are rejected. Test now covers decimal, hex, octal, two-/three-part short, mixed hex/ decimal, and leading-zero octets. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-20 22:18:44 -04:00
..
crates	fix(client): reject all obfuscated IPv4 host forms at parse time	2026-04-20 22:18:44 -04:00
packages/fabro-api-client	Merge remote-tracking branch 'origin/main'	2026-04-20 09:47:47 -04:00