Skip to content

docs: FT184 urllib.request フィールドトライアルレポートを追加#518

Merged
hideyukiMORI merged 1 commit into
mainfrom
docs/issue-516-ft184-urllib-request
May 21, 2026
Merged

docs: FT184 urllib.request フィールドトライアルレポートを追加#518
hideyukiMORI merged 1 commit into
mainfrom
docs/issue-516-ft184-urllib-request

Conversation

@hideyukiMORI
Copy link
Copy Markdown
Owner

Summary

  • FT184: urllib.request モジュール — URL フェッチ・Basic 認証・SSRF 防御の実装と検証
  • 64 テスト全通過(pytest / mypy / ruff / pip-audit)
  • クラッカーペンテスト実施: SSRF 攻撃ペイロード 8 種ブロック確認
  • バージョン: v1.8.54 → v1.8.55

Follow-up Issues

  • #516 — fetch_safe リダイレクト SSRF 対策 (MEDIUM)
  • #517 — DNS リバインディング対策 (LOW)

Test plan

  • pytest: 64 tests passed
  • mypy: success (no errors)
  • ruff check: clean
  • ruff format: clean
  • pip-audit: PYSEC-2025-183 (PyJWT via mcp transitive dep, tolerated)

🤖 Generated with Claude Code

@hideyukiMORI hideyukiMORI merged commit 32bfde1 into main May 21, 2026
2 checks passed
@hideyukiMORI hideyukiMORI deleted the docs/issue-516-ft184-urllib-request branch May 21, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant