fix: enhance IP address validation to include global unicast check for IPv4 and IPv6 (#3084)

redscholar · web-flow · commit ee846adebb32 · 2026-04-23T04:12:57.000Z
Signed-off-by: redscholar &lt;blacktiledhouse@gmail.com&gt;
diff --git a/pkg/variable/variable_get.go b/pkg/variable/variable_get.go
@@ -90,11 +90,11 @@ var GetAllVariable = func(hostname string) GetFunc {
 
 		for _, addr := range addrs {
 			if ipNet, ok := addr.(*net.IPNet); ok && !ipNet.IP.IsLoopback() {
-				if ipType == _const.VariableIPv4 && ipNet.IP.To4() != nil {
+				if ipType == _const.VariableIPv4 && ipNet.IP.To4() != nil && ipNet.IP.IsGlobalUnicast() {
 					return ipNet.IP.String()
 				}
 
-				if ipType == _const.VariableIPv6 && ipNet.IP.To16() != nil && ipNet.IP.To4() == nil {
+				if ipType == _const.VariableIPv6 && ipNet.IP.To4() == nil && ipNet.IP.IsGlobalUnicast() {
 					return ipNet.IP.String()
 				}
 			}

Original file line number	Diff line number	Diff line change
`@@ -90,11 +90,11 @@ var GetAllVariable = func(hostname string) GetFunc {`
`90`	`90`
`91`	`91`	`for _, addr := range addrs {`
`92`	`92`	`if ipNet, ok := addr.(*net.IPNet); ok && !ipNet.IP.IsLoopback() {`
`93`		`- if ipType == _const.VariableIPv4 && ipNet.IP.To4() != nil {`
	`93`	`+ if ipType == _const.VariableIPv4 && ipNet.IP.To4() != nil && ipNet.IP.IsGlobalUnicast() {`
`94`	`94`	`return ipNet.IP.String()`
`95`	`95`	`}`
`96`	`96`
`97`		`- if ipType == _const.VariableIPv6 && ipNet.IP.To16() != nil && ipNet.IP.To4() == nil {`
	`97`	`+ if ipType == _const.VariableIPv6 && ipNet.IP.To4() == nil && ipNet.IP.IsGlobalUnicast() {`
`98`	`98`	`return ipNet.IP.String()`
`99`	`99`	`}`
`100`	`100`	`}`