use ipaddress is_loopback etc to do better forbidden ranges

closes #87

1 files changed, 9 insertions, 0 deletions

diff --git a/src/utils/http.py b/src/utils/http.py
index 49738876..00066033 100644
--- a/src/utils/http.py
+++ b/src/utils/http.py
@@ -301,5 +301,14 @@ def is_localhost(hostname: str) -> bool:
             address = ipaddress.ip_address(link["addr"].split("%", 1)[0])
             if address in ips:
                 return True
+    for ip in ips:
+        if ip.version == 6 and ip.ipv4_mapped:
+            ip = ip.ipv4_mapped
+
+        if (ip.is_loopback or
+                ip.is_link_local or
+                ip.is_multicast or
+                ip.is_private):
+            return True
 
     return False