Description
The isPrivateIp function only checks private IP ranges using regex and does not handle the localhost hostname.
As a result, URLs like http://localhost:3000 are treated as public, which can cause incorrect security or network logic.
Location
- File:
packages/core/src/utils/fetch.ts
Description
The
isPrivateIpfunction only checks private IP ranges using regex and does not handle thelocalhosthostname.As a result, URLs like
http://localhost:3000are treated as public, which can cause incorrect security or network logic.Location
packages/core/src/utils/fetch.ts