A lookup for sockets (http.request, net.connect) that resolves and
refuses in one step, so the address checked is the address dialled.
Refuses the whole name if any of its addresses is refused: a name that
answers with both a public and a private address is exactly what a
rebinding attack looks like, and there is no telling which the socket
would try first.
A
lookupfor sockets (http.request, net.connect) that resolves and refuses in one step, so the address checked is the address dialled. Refuses the whole name if any of its addresses is refused: a name that answers with both a public and a private address is exactly what a rebinding attack looks like, and there is no telling which the socket would try first.