Refuse loopback, unspecified and link-local addresses in netcheck_request, on the address dialled, and use no proxy

2026-10-21 10:27:44 +00:00
parent ff849d9f62
commit e9e85365b5
4 changed files with 93 additions and 3 deletions
@@ -93,7 +93,7 @@ func tools() []stdio.Tool {
 			Description: "Make one HTTP request from this machine and answer what comes back: the status line, every response " +
 				"header and the body as text (base64 when it is not UTF-8), cut at 1 MiB with body_cut saying so. method is GET, " +
 				"HEAD or POST; headers and a body (at most 256 KiB) are sent as given. A redirect is reported (status and redirect), " +
-				"never followed. Only http and https; TLS is verified against this machine's trust store. For what a service " +
+				"never followed. Only http and https; never this machine's own loopback, unspecified or link-local addresses (refused on the address dialled, so names and rebinding are caught too), and no proxy; TLS is verified against this machine's trust store. For what a service " +
 				"answers, not only whether it is up (that is netcheck_http).",
 			Input: map[string]any{
 				"url":        map[string]any{"type": "string", "description": "http:// or https:// URL"},