gitea 275d9117c9 fix: readIgnoreIP regex captures next section header when ignoreip is empty ...

\s* in the regex matches \n, so when ignoreip = is empty:
  ^ignoreip\s*=\s*(.+)$  →  consumes the newline, captures [badbot] from
  the next section header as if it were an IP address.

Fix: use [ \t]* instead of \s* so the regex never crosses a line boundary.
Also tighten the addWhitelist line-finder to use the same pattern.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-02-20 18:30:41 +00:00

..

public

Initial release: F2B Control Center v1.0

2026-02-20 14:40:59 +00:00

package-lock.json

fix: replace vulnerable ip package with ipaddr.js + node built-ins

2026-02-20 15:45:04 +00:00

package.json

fix: replace vulnerable ip package with ipaddr.js + node built-ins

2026-02-20 15:45:04 +00:00

server.js

fix: readIgnoreIP regex captures next section header when ignoreip is empty

2026-02-20 18:30:41 +00:00