test(security): verify CIDR matching for IPv4 upper boundary

This commit is contained in:
kl
2026-03-03 14:10:56 +08:00
parent 6bcefedd08
commit 5ba88d1243

View File

@@ -43,6 +43,15 @@ public class TrustHostFilterTests {
assert !trustHostFilter.isNotTrustHost("199.1.2.3"); assert !trustHostFilter.isNotTrustHost("199.1.2.3");
} }
@Test
void shouldSupportIpv4UpperBoundaryCidrMatching() {
ConfigConstants.setTrustHostValue("*");
ConfigConstants.setNotTrustHostValue("255.255.255.255/32");
assert trustHostFilter.isNotTrustHost("255.255.255.255");
assert !trustHostFilter.isNotTrustHost("255.255.255.254");
}
@Test @Test
void shouldDenyWhenHostIsBlankOrNull() { void shouldDenyWhenHostIsBlankOrNull() {
ConfigConstants.setTrustHostValue("*"); ConfigConstants.setTrustHostValue("*");