MHSanaei 9cf8c87e8d fix(netsafe): give a guarded dial one time budget for every address ...

SSRFGuardedDialContext tried each address of a name in turn with a fresh
10 s, so a name resolving to thousands of unanswering addresses held a
dial (and the caller's goroutine) for hours; a node can choose such a
name for itself. The whole call now shares one 10 s budget, divided over
the remaining addresses with net.Dialer's 2 s floor. Multi-address DNS
answers cannot be produced in a unit test here, so no test reaches it.

2026-10-31 09:19:54 +00:00

..

netsafe_mutation_test.go

Test-quality audit: fix 2 prod bugs, strengthen weak tests, add mutation/fuzz/CI tooling (#5345)

2026-06-15 15:17:03 +02:00

netsafe_test.go

fix(netsafe): classify IPv6 transition and CGNAT ranges as internal

2026-08-19 19:37:14 +02:00

netsafe.go

fix(netsafe): give a guarded dial one time budget for every address

2026-10-31 09:19:54 +00:00