Add AWS IPv6 metadata URL, too

trailofbits · Jan 6, 2025 · 072ce07 · 072ce07
1 parent 811a9b5
commit 072ce07
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/generic/curl-unencrypted-url.sh b/generic/curl-unencrypted-url.sh
@@ -17,6 +17,9 @@ curl http://127.0.0.1 > /dev/null
 
 # ok: curl-unencrypted-url
 curl http://169.254.169.254 > /dev/null
+#
+# ok: curl-unencrypted-url
+curl http://[fd00:ec2::254] > /dev/null
 
 # ok: curl-unencrypted-url
 curl http://metadata.google.internal > /dev/null
diff --git a/generic/curl-unencrypted-url.yaml b/generic/curl-unencrypted-url.yaml
@@ -20,4 +20,5 @@ rules:
       - pattern-not-inside: curl ... http://127.0.0.1
       - pattern-not-inside: curl ... http://localhost
       - pattern-not-inside: curl ... http://169.254.169.254
+      - pattern-not-inside: curl ... http://[fd00:ec2::254]
       - pattern-not-inside: curl ... http://metadata.google.internal